> TODAY'S SUMMARY (4 articles)
Today's cybersecurity landscape highlights significant threats and trends. A major cyber incident has forced the University of New Mexico Health System to divert patients and close over 30 clinics, underscoring the vulnerability of healthcare systems. In Japan, a virtual desktop cloud service used for forex trading was severely compromised, revealing the consequences of delayed security measures. Meanwhile, experts are downplaying alarm over a critical defect in the Brotli compression library, noting that while the issue is serious, no active exploitation has been reported. Overall, the focus remains on the urgency of addressing vulnerabilities in critical sectors and the importance of timely security updates.
|
// AI-powered summary generated at 04:00
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than...
The Health Care Cybersecurity and Resiliency Act of 2026 was passed by unanimous consent last week, potentially expanding federal cyber requirements for healthcare organizations.
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was...
The individual was detained in May and has been extradited to Germany to face hacking charges.
The post Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany appeared first on SecurityWeek.
Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory cites SOCRadar, which has verified mor...
Vijil has released Diamond Adaptive Red Teaming for Agents (DART), an automated testing system that finds security vulnerabilities and policy violations in enterprise AI agents. DART employs multiple adversarial agents of its own to probe the target’s defenses with multi-turn attacks that learn and...
Une base attribuée à la CGT circule sur un forum pirate. Ses nombreux doublons gonflent les chiffres annoncés.
A report by a Labour MP and an academic argues that if the British public cannot see what Russian activity costs, it cannot weigh that burden against the cost of defending against it.
Edgescan announced the launch of Edgescan Atomic, an autonomous penetration-testing capability built on agentic AI and Edgescan’s existing security intelligence. Edgescan Atomic can run on top of Edgescan’s existing continuous security platform or run as a stand along Agentic Penetration Testing sol...
Google has new Android updates, but many users will not be able to get patched immediately.
Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar ClickFix technique, dressed up as Cloudflare’s standard bot check. The fake page asks you to run a command, supposedly to confirm you’re not a b...
Trustero has announced the launch of Trustero Third-Party Risk Management (TPRM). TPRM extends Trustero’s AI engine beyond a company’s own compliance program to the vendors and partners it depends on. Instead of collecting and reading vendor documentation, teams review and approve a recommended risk...
Le Galaxy S26 piraté trois fois dès le premier jour du Pwn2Own Ireland 2026, avec des exploits mêlant nouvelles failles zero-day et anciennes failles.
Le post Pwn2Own Ireland 2026 : le Samsung Galaxy S26 piraté trois fois dès le premier jour a été publié sur IT-Connect.
It was discovered that Sudo did not properly handle time-based access
restrictions when sudoers rules used NOTBEFORE or NOTAFTER with
timestamps omitting the trailing timezone indicator. A local attacker
could possibly use this issue to execute commands outside the intended
time window by manipulati...
Hoxhunt has announced expanded capabilities for Hoxhunt Respond, its email incident response automation platform for security operations teams. Respond can reduce phishing tickets requiring analyst attention by up to 99% and remediate confirmed malicious campaigns in under one minute. Effective phis...
Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers.
The post Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform appeared first on SecurityWeek.
Deux adresses des forums pirates Dread détournées : un hacker revendique l’attaque, menace les administrateurs et exige réparation.
It was discovered that Poppler had an integer overflow in
FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to
cause Poppler to crash, resulting in a denial of service, or execute
arbitrary code.
(CVE-2026-102620)
It was discovered that Poppler had an integer overflow in
SplashClip:...
Tanium has relaunched Tanium Security Operations to address AI-assisted attacks in which adversaries use legitimate administrative tools to blend into normal activity and spread across endpoints. The platform is designed to detect this behavior, support response across affected endpoints and help an...
Barracuda finds phishing emails designed to manipulate both human users and AI assistants