> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The U.S. CISA has added significant flaws in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities catalog, indicating active exploitation. Meanwhile, the PHP web programming language faced severe vulnerabilities, termed "PHP-ocalypse," which were exacerbated by AI-assisted discovery and exploitation. Additionally, a new UEFI bootkit, BlackX, has been reported to bypass Secure Boot, while a memory-corruption flaw in Google's Brotli decoder affects multiple widely-used software packages. Notably, Capcom experienced a data breach exposing 11.7 million email addresses, emphasizing the ongoing risks to personal data. As AI technologies evolve, their role in enhancing both vulnerability detection and exploitation remains a growing concern.
|
// AI-powered summary generated at 20:00
Researchers investigated the zero-knowledge claims of password managers—and found some possible attack scenarios.
The Problem with the Traditional Idea of a Site For a long time, the concept of a “site” in networking and security was synonymous with a physical office. This included: a headquarters building a branch office a campus connected to the corporate network This traditional model was built on several as...
Ransomware Attack Forces Mississippi’s Largest Health System to Shut Down Statewide Clinics The University of Mississippi Medical Center (UMMC), the state’s only academic medical center, was hit by a ransomware attack in the early hours of February 19th that knocked out its entire IT network — inclu...
It was discovered that DjVuLibre could be forced to execute a division
by zero in certain instances. A remote attacker could possibly use
this issue to cause applications to stop responding or crash, resulting
in a denial of service. (CVE-2021-46312)
It was discovered that DjVuLibre incorrectly han...
While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers.Â
The post Autonomous AI Agents Provide New Class of Supply Chain Attack appeared first on SecurityWeek.
A low-skilled Russian-speaking attacker has used GenAI tools to help deploy a successful attack workflow targeting FortiGate instances
Quartet accused of attacking public institutions, claiming the government was responsible for 2024 tragedy Spanish police say four self-proclaimed members of Anonymous are in custody after allegedly carrying out several cyberattacks on public authorities in the wake of the 2024 DANA floods.…
One extra letter in the domain is all it takes to hand over remote control of your system.
Meta has released WhatsApp Beta for Android 2.26.7.8 through the Google Play Beta Program. The update includes references to password-protected accounts, indicating plans to introduce an additional layer of protection beyond the app’s current authentication options. WhatsApp is exploring the impleme...
Attackers are exploiting CVE-2026-1731 in BeyondTrust RS and PRA to deploy VShell, gain persistence, move laterally, and control compromised systems. Threat actors are actively exploiting a recently disclosed critical vulnerability, tracked as CVE-2026-1731 (CVSS score: 9.9), in BeyondTrust Remote S...
Good article on password managers that secretly have a backdoor.
New research shows that these claims aren’t true in all cases, particularly when account recovery is in place or password managers are set to share vaults or organize users into groups. The researchers reverse-engineered or closely ana...
Ein Hacker hat sich Zugriff auf Mitarbeiterdaten von RTL verschafft.nitpicker – shutterstock.com
Die RTL Group wurde offenbar Opfer einer Cyberattacke. Wie Cybernews berichtet, brĂĽstet sich ein Cyberkrimineller namens LuneBF mit gestohlenen Daten von mehr als 27.000 Mitarbei...
As more organizations run their own Large Language Models (LLMs), they are also deploying more internal services and Application Programming Interfaces (APIs) to support those models. Modern security risks are being introduced less from the models themselves and more from the infrastructure that ser...
A newly uncovered infostealer, suspected to be built with the help of a large language model, is targeting victims with Python and C++ variants, each tailored for a different stage of data theft. Kaspersky researchers discovered a stealer dubbed “Arkanix,” which is capable of...
Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network.
The post Romanian Hacker Pleads Guilty to Selling Access to US State Network appeared first on SecurityWeek.
CISA flagged two Roundcube Webmail vulnerabilities as actively exploited in attacks and ordered U.S. federal agencies to patch them within three weeks. [...]
Off-the-shelf tools helped Russian-speaking cybercrime group run riot Cybercriminals armed with off-the-shelf generative AI tools compromised more than 600 internet-exposed FortiGate firewalls across 55 countries in just over a month, according to a new incident report from AWS.…
Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices.
The post Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS appeared first on SecurityWeek.
Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has deployed incident response protocols following a cybersecurity incident
When AI systems detect violent intent but private companies decide whether it’s “imminent enough” to alert authorities, we are operating inside a regulatory void. A recent Canadian tragedy exposes the uncomfortable reality that tech platforms are quietly acting as risk arbiters without shared stand...