> TODAY'S SUMMARY (7 articles)
Today's cyber news highlights several key threats and trends. Hackers are increasingly targeting AI systems, as demonstrated by a recent incident where credentials were stolen, leading to $740,000 in unauthorized compute usage for a cloud provider. Microsoft researchers revealed vulnerabilities in AI models, showing that attackers can create backdoors by manipulating just a few neurons. Additionally, recent updates for Slackware address critical security issues, including remote code execution and memory errors in their httpd and Git packages. The ongoing risk of vehicle hacking is underscored by a podcast discussing how attackers can gain control over car systems. As cyber threats evolve, organizations must prioritize robust security measures against these emerging vulnerabilities.
|
// AI-powered summary generated at 04:00
TL;DR
AI coding assistants can hallucinate package names, creating phantom dependencies that don't exist in official repositories. Attackers exploit this predictable behavior through slopsquatting, which involves registering malicious packages with names that AI models commonly suggest. This e...
A report published by the Forum of Incident Response and Security Teams (FIRST) Inc. projects approximately 59,000 new vulnerabilities will be discovered this year, an estimate that in a worst case scenario could rise to as high as 117,673. Based on a statistical model that FIRST has developed, the...
WhatsApp has begun rolling out parent-managed accounts for pre-teens, allowing parents and guardians to decide who can contact them and which groups they can join. [...]
Â
Stryker, a major medical equipment provider for the healthcare sector, has suffered a destructive cyberattack that wiped corporate data and severed employee access, likely from an Iranian sponsored hacking group.
Stryker Corporation is a global leader in medical technology, with over $22 billion...
Pro-Palestinian hacktivist group Handala claims a cyberattack on Stryker, alleging it wiped 200,000 systems and disrupted global operations. Pro-Palestinian hacktivist group Handala claims responsibility for a disruptive cyberattack against medical technology firm Stryker. “Medical technology giant...
An SQL injection vulnerability in Ally, a WordPress plugin from Elementor for web accessibility and usability with more than 400,000 installations, could be exploited to steal sensitive data without authentication. [...]
The leadership structure, commonly referred to as the “dual-hat” arrangement, assigns a single individual to oversee both organizations.
The post Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command appeared first on SecurityWeek.
Author, Creator & Presenter:Lisa LeVasseur
Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) content on the Organizations' YouTube Channel.
The post USENIX Security ’25 (Enigma Track)...
BeatBanker Android malware spreads through fake Starlink apps on websites imitating Google Play Store, hijacking devices, stealing credentials, and mining crypto. A new Android malware called BeatBanker spreads through fake Starlink apps distributed on websites posing as the Google Play Store. Once...
The medical device manufacturer Stryker confirmed reports Wednesday that a cyberattack has disrupted operations after a hacker group claimed to have targeted the company in retaliation for U.S. and Israeli strikes on Iran.
L'Autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Based s.r.l., comprenant le prononcé d'une amende de 12 000 €, pour des manquements liés à la gestion des droits d'un ancien collaborateur sur sa messagerie professionnelle et à l'obligation d'inf...
L'Autorité de protection des données (APD) a publié une décision à l'encontre du Service Public Fédéral Finances (SPF Finances) pour des manquements en lien avec le traitement des données de journalisation sur sa plateforme en ligne "MonMinfin". Cette affaire débute par une plainte déposée le 25 fév...
The hacktivist group claimed the attack was in retaliation for a U.S. strike on a Tehran school that killed more than 175 people, most of them children.
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de VODAFONE ESPAÑA, S.A.U. (opérant également sous la marque LOWI), comprenant le prononcé d'une amende de 200 000 €, pour des manquements liés à la licéité du traitement dans le cadre d'une demande...
L'autorité britannique, le Bureau du Commissaire à l'information (ICO), a publié une décision de sanction à l'encontre de la police écossaise, comprenant le prononcé d'une amende de 66 000 livres sterling (environ 77 220 €), pour des manquements graves liés à la gestion d'informations personnelles s...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies on Wednesday to patch their systems against an actively exploited n8n vulnerability. [...]
La Commission nationale de l’informatique et des libertés (CNIL) et la Haute Autorité de santé (HAS) ont signé une convention de partenariat le 10 mars 2026 visant à renforcer les bonnes pratiques relatives aux outils numériques dans les secteurs sanitaire, social et médico-social.Cette collaboratio...
United Healthcare impersonators are using an IPv6 trick to hide the real destination of phishing links in emails promising free Oral-B toothbrushes.
Salesforce customers have, once again, been targeted by the ShinyHunters group – or, at least, it’s what the group claims. Attackers modified and abused benign tool On Saturday, Saleforce confirmed that its security team has identified an attack campaign by unnamed malicious actors looking to access...
Russian threat actors for more than a year have targeted HR and recruiting operations in a sophisticated phishing and infostealing campaign that includes a component, dubbed BlackSanta, that can shut down antivirus tools and EDR protections before deploying the malware that exfiltrates data, Aryaka...