> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.
Troops fitted with new comms kit as part of Project ASGARD British soldiers are to get an array of AI-ready kit that should mean they don't have to wait to see the "whites of their eyes" before pulling the trigger.…
Benny Isaacs discovered that ImageMagick did not properly manage memory
when processing certain image files. An attacker could possibly use this
issue to cause a denial of service or execute arbitrary code.
DuckDuckGo has added voice chat to Duck.ai, allowing users to speak to an AI assistant while keeping audio private, unrecorded, and excluded from AI training. Voice chat is available in the DuckDuckGo browser and most third-party browsers, with support for Mozilla listed as coming soon. According to...
The European Commission and government agencies in Finland and the Netherlands have suffered potentially related breaches
China-linked group UNC3886 targeted Singapore ’s telecom sector in a cyber espionage campaign, Singapore’s Cyber Security Agency revealed. Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) ran Operation CYBER GUARDIAN to protect the telecom sector. Since Ju...
Sync-in 2.0 apporte une fonctionnalité attendue par les utilisateurs : la prise en charge native du protocole OpenID Connect (OIDC) pour l'authentification.
Le post Sync-in 2.0 ajoute l’authentification OpenID Connect : une bonne nouvelle pour les entreprises a été publié sur IT-Connect.
Cybersecurity teams are overwhelmed with data and short on clarity, while adversaries use AI to move faster and operate at unprecedented scale. Most organizations collect enormous volumes of findings: vulnerabilities, misconfigurations, penetration test results, detection gaps, threat intelligence,...
The Netherlands' Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security flaws in Ivanti Endpoint Manager Mobile (EPMM), according to a notice...
À mesure que les annonces autour des ordinateurs quantiques se multiplient, une question revient : le Bitcoin est-il réellement menacé par le quantique ?
Le post Bitcoin face à la menace quantique : un risque réel ou largement exagéré ? a été publié sur IT-Connect.
A dual Chinese and St. Kitts and Nevis national was sentenced to 20 years in prison in absentia for his role in an international cryptocurrency investment scheme (also known as pig butchering or romance baiting) that defrauded victims of more than $73 million. [...]
Anthropic a révélé que son modèle d'IA Claude Opus 4.6 était parvenu à identifier plus de 500 failles importantes dans un ensemble de projets open source.
Le post Claude Opus 4.6 : la nouvelle IA d’Anthropic a identifié plus de 500 failles dans des projets Open Source a été publié sur IT-Connect.
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Discord users will soon see a change to how their accounts work. From early March 2026, access to some features will require age verification using an ID or a face scan. The changes follow earlier deployments in a small number of countries and will apply to both new and existing accounts. Under the...
Last year we wrote about a Windows 11 vulnerability that allowed a regular user to gain administrative privileges. Not long after, Manuel Kiesel from Cyllective AG reached out to us after stumbling across a seemingly similar issue while investigating the Lenovo Vantage application. It turns out that...
CVSSv3 Score:
6.4
An Improper Link Resolution Before File Access vulnerability [CWE-59] in FortiClient Windows may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.
Revised on 2026-02-10 00:00:00
CVSSv3 Score:
3.8
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] in FortiOS FSSO Terminal Services Agent may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via craft...
A heap‑based buffer overflow exists in libjpeg‑turbo’s h2v2_merged_upsample_internal() function when processing 12‑bit lossless JPEG images. An attacker could craft an image containing out‑of‑range 12‑bit samples that, when decompressed with merged upsampling enabled, may trigger a segmentation faul...
CVSSv3 Score:
6.7
A Use of Externally-Controlled Format String vulnerability [CWE-134] in FortiGate may allow an authenticated admin to execute unauthorized code or commands via specifically crafted configuration.
Revised on 2026-02-10 00:00:00
CVSSv3 Score:
7.5
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] in FortiOS fnbamd may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, under specific LDAP server configuration.
Revised on 2026-02-10 00:00:00