> TODAY'S SUMMARY (130 articles)
Today's cybersecurity news highlights several significant threats and vulnerabilities. DreamHost has mandated password resets for users following a disruption linked to an ongoing incident. A widespread attack has seen 953 online stores, predominantly on Magento, infected with malware that evades detection. Critical vulnerabilities in the Brotli compression library have prompted emergency patches from Microsoft, PHP, and others, as exploits are actively being leveraged. Additionally, researchers have revealed a new Android spyware platform, uCreator, which stealthily targets popular messaging apps. Meanwhile, the U.S. government faces scrutiny over its handling of surveillance laws, and malicious actors are increasingly using social engineering tactics via Microsoft Teams to deploy malware.
|
// AI-powered summary generated at 20:01
In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses f...
Mozilla a retiré 16 extensions Firefox clonant Rabby et OKX Wallet pour voler phrases de récupération et clés privées. Voici les détails sur cette campagne.
Le post Ces 16 extensions Firefox malveillantes veulent voler vos cryptos a été publié sur IT-Connect.
The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.
The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek.
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools.
The post Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own appeared first on SecurityWeek.
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon.
To that end, the agencies seized several domains and blocked access to platforms that were u...
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE...
17 610 dépôts GitHub piégés, dont plus de 13 000 réactivés en 34 heures : la campagne FakeGit est de retour pour diffuser le malware SmartLoader.
Le post FakeGit est de retour : 17 610 dépôts GitHub piégés pour diffuser le malware SmartLoader a été publié sur IT-Connect.
A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, VP of Rapid7 Intelligence, explains why its operators go after mail gateways and other edg...
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. [...]
Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The systems range from login screens to a turbine control page that offers a Stop but...
The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, the document addresses governance...
Brenden Cuni, an ICE supervisor, has been accused of excessive force and tackling a pregnant woman to the ground. Several of his arrests were later found to be unlawful in federal court.
Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say their own organization hesitates to let AI make an operational decision without a hum...
Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted.
The post Formula Predicts When AI Chatbots Are at Risk of Turning Bad appeared first on SecurityWeek.
Summary The UK’s latest sanctions target the broader infrastructure supporting Russia’s wartime economy. The UK designated crypto payment processors Cryptomus…
The post UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions appeared first on Chainalysis.
Gear Review: XTEINK X4 Pro
Un incident de cybersécurité a perturbé la production et la distribution des avis des tribunaux de faillite fédéraux américains à l'échelle nationale. L'incident, qui a débuté le 9 octobre, a retardé les communications aux créanciers et affecté les avis électroniques et papier. Le centre de notifica...
La ville de Bernalillo, au Nouveau-Mexique, a été victime d'une cyberattaque qui a bloqué les paiements en ligne des factures d'eau et forcé la fermeture du bureau des véhicules à moteur. Les autorités locales ont contacté le FBI et des spécialistes en cybersécurité pour rétablir les services. L'inc...
Open source software faces significant regulatory shifts, making "secure by design" development practices increasingly important. The Cyber Resilience Act (CRA) takes effect on December 11, 2027, and as of September 11, 2026, the first CRA vulnerability and incident reporting obligations were live....