> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape reveals significant threats across various sectors. Capcom confirmed a data breach exposing 11.7 million user accounts, emphasizing the risks associated with gaming platforms. In a concerning trend, an attacker compromised Microsoft 365 accounts at 79 organizations without needing passwords, utilizing replayed sign-in sessions and hidden inbox rules. Vulnerabilities in PHP continue to be exploited, with millions of attack attempts related to PHP2Shell and newly discovered RCE flaws prompting urgent patching. Additionally, Russian-linked hackers have launched destructive attacks in Ukraine, while compromised TLS certificates from eMudhra Limited highlight the ongoing risks in digital trust infrastructure. The rise of AI in cybersecurity is also notable, with AI tools being used both defensively and as vectors for new attacks.
|
// AI-powered summary generated at 12:01
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Attackers are using stolen connection keys exposed in a TeamUpdraft security breach to install malicious plugins on affected WordPress sites and establish persistent access. Sites already compromised may remain at risk even after the exposed credentials are revoked.
The att...
PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S. government ordered federal civilian agencies to remove DeepSeek products from their IT systems and stop buying them. The order also reaches third-party too...
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025.
"The most distinctive technical marker for Bronze Sandcastle is its consistent use...
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another
Consider this the wake-up call
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have relied on for years are fad...
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws Details of two critical PHP vulnerabilities, dubbed PHP2Shell and tracked as CVE-2026-109618 and CVE-2026-109619, leaked online ahead of coordinated disclosure, prompting the PHP project to urge all users to prepare for immediate patch...
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
Give your agents freedom to do useful work by locking them down
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek.
Proton now supports admin roles and SCIM for groups, enabling you to manage organizational access easily and more securely.
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the firewalls relying on cookie...
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses 'absolutely substandard'
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS).
Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.
A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the group’s tactics
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared first on SecurityWeek.
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says.
PHP will release the fix at 14:00 UTC on October 21 for two flaws it rates 9.2 out o...
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness i...