> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything.Â
Their concerns are practical. An IPS protection could block legitimate traffic. A co...
Binance links $6.3 billion security incident to compromised laptop Binance says a compromised DevOps engineer’s laptop may have let an attacker reach a service container and submit unauthorized withdrawal transactions in an incident with an estimated impact of $6.3 billion. The exchange has frozen r...
Other agency errors included an unchecked software bug that led to Terrorism Act detentions
Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history—with billions of crypto likely gone for good.
The company suffered outages starting at 2pm EST on Thursday and eventually attributed the downtime to a compromise involving an unnamed provider.
A hacker group claims it stole data on 41,000 DHS employees, exposing work contact details and internal group memberships.
Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical stores were temporarily unavailable.
Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]
A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The malicious package, version 2.1.313, was published on Open VSX, an open-source marketplace for VS Code exten...
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek.
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets.
The conspiracy was organized and led by members of former Syrian President Bashar al-...
The US Department of Homeland Security has had the details of more than 41,000 staff, including ICE and CBP agents, published online. Not ideal for an organisation with "Security" in its name.
Read more in my article on the Hot for Security blog.
A trillion-parameter AI model that its developer says could help attackers carry out real cyberattacks is now free to download, modify and run outside the developer’s control.
Mistral AI released the open weights of Mistral Large 4, which it calls “Le Chonk,” on Thursday, w...
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
The first hours after a serious cyber incident are filled with activity. Security starts investigating, IT works to contain the impact, legal begins assessing potential obligations, and executives want to know what happened and what the company is doing about it. Most teams re...
Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.
The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek.
Chainalysis investigators assess the $6.4 billion hack of Binance — the largest in the history of crypto, and one of…
The post Binance Exploit: Latest Findings and Response appeared first on Chainalysis.