[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (4 articles)

|

// AI-powered summary generated at 04:00

> Bitcoins volés : un ex-agent condamné à rembourser
Un ex-agent de la NCA doit rembourser plus de deux millions d’euros aprùs le vol de bitcoins saisis sur le darknet.
> The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
The US government’s Tradewinds initiative has made it easier to throw millions of dollars at “nontraditional” defense contractors, including OpenAI, Anthropic, and Google.
> Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache's multiprocess mode, where the cache runs as a standa...
> Carrefour : une fuite recyclée pour gagner en réputation
Une base attribuée à Carrefour circule sur des forums depuis des années : données recyclées, réputation et revendications.
> PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially motivat...
> DNSSEC : la clé principale du DNS change le 11 octobre, qui doit vérifier son résolveur ?
Le 11 octobre 2026, la clĂ© KSK-2024 signera la zone racine du DNS. Les rĂ©solveurs oĂč la validation DNSSEC est activĂ©e sont concernĂ©s : voici comment vĂ©rifier. Le post DNSSEC : la clĂ© principale du DNS change le 11 octobre, qui doit vĂ©rifier son rĂ©solveur ? a Ă©tĂ© publiĂ© sur IT-Connect.
> PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
> Dark web : un vendeur de cocaĂŻne arrĂȘtĂ©
Un vendeur du dark web est accusĂ© d’avoir expĂ©diĂ© des milliers de colis de cocaĂŻne depuis 2022.
> S21 Transcriber: Turn Spoken Evidence Into Searchable Intelligence
S21 Transcriber turns audio and video evidence into searchable, reviewable intelligence, fully offline, so investigators can find what matters faster.
> PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem. The post PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem appeared first on CyberScoop.
> Oklahoma judge’s Flock ruling shows the power of Supreme Court’s digital evidence decision
How a recent Supreme Court decision on geofencing influenced a federal judge to toss a sheriff's Flock camera evidence in a drug trafficking case.
> Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an "Arbitrary File Access" vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary files in the web application&#;x26;#;39;s directory, potentially exp...
> Adecco : une base de 2022 proposée à la vente
Une base attribuée à Adecco et datée de 2022 est proposée à la vente. Son authenticité reste à confirmer.
> Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to exploit it. CVE-2...
> OT Coalition Urges CISA to Mandate Federal OT Security
OTCC urged CISA to mandate baseline security requirements for federal operational technology
> Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying customers that their utility account information was accessed by hackers. The post Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts appeared first on SecurityWeek.
> Cyber experts call on CISA to create mandatory federal OT rules
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure.
> Ransomware has a new target. Is your backup ready?
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. [...]
> Gremlin Foresight AI finds system weaknesses and verifies the fixes
Gremlin has announced the general availability of Gremlin Foresight AI. Following a successful beta, Gremlin Foresight AI has proven it can identify and address reliability risks before they become incidents, helping engineering teams move at AI speed without compromising the resilience of mission-c...
> Imply Lumi connects SIEM tools and AI agents to more security data
Imply has unveiled its expanded vision for the security information and event management (SIEM) market, with Imply Lumi providing the data platform for the agentic SIEM. Imply is bringing modern data architecture to security teams facing growing data volumes, rising costs and new demands from AI-dri...