> TODAY'S SUMMARY (130 articles)
Today's cybersecurity news highlights several significant threats and vulnerabilities. DreamHost has mandated password resets for users following a disruption linked to an ongoing incident. A widespread attack has seen 953 online stores, predominantly on Magento, infected with malware that evades detection. Critical vulnerabilities in the Brotli compression library have prompted emergency patches from Microsoft, PHP, and others, as exploits are actively being leveraged. Additionally, researchers have revealed a new Android spyware platform, uCreator, which stealthily targets popular messaging apps. Meanwhile, the U.S. government faces scrutiny over its handling of surveillance laws, and malicious actors are increasingly using social engineering tactics via Microsoft Teams to deploy malware.
|
// AI-powered summary generated at 20:01
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Hardware crypto device drivers;
- NVIDIA Tegra memory controller driver;
- Network drivers;
- USB core drivers...
Forensic Windows : retrouvez les clés USB branchées sur un poste grâce à USBSTOR, setupapi.dev.log, MountPoints2, aux journaux d'événements et à USBDeview.
Le post Forensic Windows – Partie 15 : retracer l’historique des périphériques USB a été publié sur IT-Connect.
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains.
The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek.
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in...
Discover what’s new on Forensic Focus: explore Belkasoft X for mobile forensics on iOS and Android, find out how MSAB’s XRY Pro and BruteStorm Surge helped expose an international fraud network, see how MD-LIVE’s Block Hash Scan identifies known target
A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. [...]
Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.
DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department and FBI took down two hacking tools this week, Microscan and FishHub, both built and run by a Beijing-based company with direct gover...
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...]
Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could all...
The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when available, how to fix them. The s...
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek.
The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure notice (Source: US Department of Justice) Accor...
I remember being in the room at DEF CON 23 in Las Vegas, in 2015, listening to "Let's Encrypt – Minting Free Certificates to Encrypt the Entire Web". It was still months before Let's Encrypt would launch their public beta and begin cementing 90-
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over.
Searchlight Cyber, which disclosed the flaw on October 8, says an attacker w...