> TODAY'S SUMMARY (11 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A memory corruption flaw in Google's Brotli decoder affects multiple widely used applications, including Node.js, Python, and Envoy, posing risks of remote code execution. LiteLLM reported a serious incident where a leaked master key allowed attackers to hijack its GitHub release pipeline. In data breach news, Capcom suffered a breach exposing 11.7 million email addresses, while patient data was stolen in an attack on Point Vision. Additionally, the U.S. CISA highlighted actively exploited vulnerabilities in Collabora Online and Arista VeloCloud, urging immediate attention. Lastly, a new tool called Pulse has been released to help users interpret Windows event logs more clearly.
|
// AI-powered summary generated at 12:01
The company said it detected unusual activity within its IT environment on Sunday and activated incident response protocols and isolated the impacted systems.
CVE-2026-1731 is an RCE vulnerability in identity platform BeyondTrust. This flaw allows attackers control of systems without login credentials.
The post VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731) appeared first on Unit 42.
Oleksandr Didenko ran laptop farms and provided forged or stolen identities to North Korean operatives who gained remote employment at 40 U.S. businesses.
The post Ukrainian sentenced to 5 years in prison for facilitating North Korean remote worker scheme appeared first on CyberScoop.
Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its persistence across different devices. [...]
The FBI says hacks that trick ATMs into spitting out cash on demand are rising, with hundreds of attacks in the past year alone netting hackers millions in stolen bills.
Cellebrite, which makes phone unlocking and hacking tools, stopped sales to countries that allegedly abused its tools. But after new allegations in Jordan and Kenya, the company has changed its approach.
Highlights
The Perimeter is Porous: Modern Agentic AI and the Model Context Protocol (MCP) have effectively turned internal data centers inside out, making the "internal API" security model obsolete.
The "Confused Deputy" Risk: Legitimate AI agents act as trusted internal entities but can be exploi...
Are Non-Human Identities the Key to Unlocking Agentic AI in Data Protection? Organizations across industries are increasingly focusing on the management of Non-Human Identities (NHIs). These machine identities, akin to digital passports, play a pivotal role in cybersecurity by managing encrypted pas...
This week, the US National Institute of Standards and Technology (NIST) announced a new listening exercise, the AI Agent Standards Initiative, which it hopes will provide a roadmap for addressing agentic AI hurdles and, it said, ensure that the technology “is widely adopted wi...
How Secure Are Your Machine Identities? Non-Human Identities (NHIs) play a pivotal role in cybersecurity. Where businesses continue transitioning to cloud environments, the importance of protecting these machine identities becomes paramount. But how secure are your NHIs, and what measures are you im...
Is Your Organization Ready for Agentic AI in Cybersecurity? Where cyber threats are becoming increasingly sophisticated, the use of Agentic AI in cybersecurity is transforming how industries like financial services handle their security protocols. But what exactly does this mean for your organizatio...
Google said it prevented 1.75 million bad apps from going live on Google Play during 2025, a figure that's down from previous years.
How Can Organizations Leverage Non-Human Identities for Better Security? Have you ever wondered how Non-Human Identities (NHIs) are reshaping cybersecurity? With cyber threats evolve, organizations must prioritize the management of NHIs, especially when operating in cloud environments. NHIs serve as...
In a flash alert on Thursday, the FBI said it has tracked more than 1,900 ATM jackpotting incidents since 2020 and over 700 in 2025 that involved more than $20 million in losses.
Several security issues were fixed in the Linux kernel.
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image backend are affected. For the oldstable d...
Dragos's Rob Lee said Volt Typhoon is "still very active, and they're still absolutely mapping out and getting into embedding in U.S. infrastructure, as well as across our allies.”
Governments and businesses have a shared interest in seeing post-quantum encryption broadly adopted throughout society.
The post State Dept. official says post-quantum transition plans will outlive current leadership appeared first on CyberScoop.
Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been...
A buffer overflow was discovered in libvpx, a library implementing the VP8/VP9 open video codecs, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1.12.0-1+deb12u5.