> TODAY'S SUMMARY (114 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A red-team report revealed OpenAI's insufficient monitoring during a Hugging Face attack, raising concerns about AI oversight. Microsoft Teams is set to introduce AI-powered phishing detection, enhancing security within its platform. The sophisticated BlackX UEFI bootkit has been identified, specifically targeting diplomatic organizations in Central Asia, demonstrating the increasing sophistication of supply chain attacks. Additionally, the PHP community is grappling with multiple critical remote code execution vulnerabilities, with emergency patches being issued for PHP2Shell as exploitation attempts surge. Meanwhile, Capcom confirmed a data breach affecting 11.7 million accounts, emphasizing the ongoing risks to personal data across industries.
|
// AI-powered summary generated at 20:00
A list of topics we covered in the week of February 9 to February 15 of 2026
Julie Chatman never planned to get into cybersecurity. In fact, she believes most don’t but are mentored into it, as she was.
Chatman started her professional career as a Navy Hospital Corpsman, specializing in medical laboratory science and technology — a core part of medi...
USN-8022-1 fixed vulnerabilities in Expat. This update provides the
corresponding updates for Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that Expat incorrectly handled the initialization of parsers
for external entities. An attacker could possibly use this issue to cause a
d...
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
The post Google Patches First Actively Exploited Chrome Zero-Day of 2026 appeared first on SecurityWeek.
En abusant du système d'Artefacts de Claude et de Google Ads, les pirates cherchent à piéger les utilisateurs de macOS dans le cadre d'attaques ClickFix.
Le post Les artefacts de Claude détournés pour piéger les utilisateurs de macOS avec un malware infostealer a été publié sur IT-Connect.
USN 8025-1 fixed a vulnerability in .NET. This update provides the
corresponding fix for Ubuntu 24.04 LTS.
Original advisory details:
Kevin Jones discovered that the System.Security.Cryptography.Cose
component in .NET did not properly handle certain missing special
elements in input data. An...
In 2022 (time flies!), I wrote a diary about the 32-bits VS. 64-bits malware landscape[1]. It demonstrated that, despite the growing number of 64-bits computers, the "old-architecture" remained the standard. In the SANS malware reversing training (FOR610[2]), we quickly cover the main differences be...
In December 2025, a database of the Brazilian crowdfunding platform APOIA.se was posted to an online forum. In January 2026, the company confirmed it had suffered a data breach. The incident exposed 451k unique email addresses along with names and physical addresses.
Ten years on, the Bangladesh Bank cyberheist — a landmark cybersecurity incident that rewrote the rules of nation state–sponsored hacking — continues to offer lessons for the cybersecurity community.
Cyberspies hacked into Bangladesh Bank internal network and SWIFT (Society...
AI automation, RaaS, a significant bump in vulnerability disclosures, and a rise in new ransomware gangs are reshaping the threat landscape and forcing defenders to change strategies.
The post AI and RaaS Alter Threat Landscape, New Ransomware Groups Grow by 30% appeared first on Security Boulevard...
The CISO role has changed significantly over the past decade, but according to John White, EMEA Field CISO, Torq, the most disruptive shift is accountability driven by agentic AI. In this Help Net Security interview, White explains how security leaders must design and govern hybrid workforces where...
Google on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild.
The high-severity vulnerability, tracked as CVE-2026-2441 (CVSS score: 8.8), has been described as a use-after-free bug in CSS. Security researcher Shaheen Fazim...
Smart home devices in many homes collect audio, video, and location data. The apps that control those devices often focus on the account owner, even when the technology also captures guests, neighbors, and other people who never agreed to be monitored. New research examined whether Chinese smart hom...
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 TL;DR 米国財務省外国資産管理局（OFAC）は、英国およびオーストラリアと連携し、ランサムウェア攻撃を含むサイバー犯罪を支えていたロシアの防弾ホスティング事業者 Media Land, LLC とそのネットワークを制裁指定しました。 今回の措置...
Une faille de sécurité critique présente dans Microsoft Configuration Manager (SCCM) est désormais considérée comme exploitée par la CISA : CVE-2024-43468.
Le post Microsoft : cette faille dans SCCM n’est pas récente, mais elle est exploitée dans des attaques a été publié sur IT-Connect.
GitHub Security Advisories are used to distribute vulnerability information in open-source projects and security tools. A new study finds that only a portion of those advisories ever pass through GitHub’s formal review process. A large scale view of advisory data A review of GitHub Security Advisori...
In this Help Net Security video, Tod Beardsley, VP of Security Research at runZero, explains what CISA’s Known Exploited Vulnerabilities (KEV) Catalog is and how security teams should use it. He shares his perspective as a former section chief for KEV at CISA and breaks down common misunderstandings...
Several security issues were fixed in AIOHTTP.
In this episode, we discuss two major tech stories impacting privacy and security. First, we analyze Ring’s new AI-powered ‘Search Party’ feature and its controversial Super Bowl ad that sparked privacy concerns. We then transition to a breaking story about a zero-click remote code execution flaw in...
A growing number of homelab builders and small server operators are testing an open source operating system that combines basic server management, storage control, and container services under a web interface. MOS is a free modular OS built on a Devuan base that provides a web UI and API for system...