> TODAY'S SUMMARY (133 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The LiteLLM project was compromised, leading to the distribution of malware designed to steal sensitive credentials. The Indian certificate authority eMudhra is withdrawing from the SSL/TLS market after its private keys were found to be trivially guessable, prompting major tech firms to block its certificates. A significant vulnerability in Signal could expose users' audio and video after call hang-ups, necessitating immediate updates. Additionally, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are now being exploited widely, with attempts detected before public disclosure. Organizations are urged to bolster defenses against a limited range of critical vulnerabilities often targeted by attackers.
|
// AI-powered summary generated at 20:01
Several security issues were fixed in GitHub CLI.
Several security issues were fixed in the Linux kernel.
Microsoft on Wednesday said it built a lightweight scanner that it said can detect backdoors in open-weight large language models (LLMs) and improve the overall trust in artificial intelligence (AI) systems.
The tech giant's AI Security team said the scanner leverages three observable signals that c...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
CISA confirmed on Wednesday that ransomware gangs have begun exploiting a high-severity VMware ESXi sandbox escape vulnerability that was previously used in zero-day attacks. [...]
Several security issues were fixed in the Linux kernel.
Threat hunters have disclosed details of a new, stealthy malware campaign dubbed DEAD#VAX that employs a mix of "disciplined tradecraft and clever abuse of legitimate system features" to bypass traditional detection mechanisms and deploy a remote access trojan (RAT) known as AsyncRAT.
"The attack le...
We're releasing new research on detecting backdoors in open-weight language models and highlighting a practical scanner designed to detect backdoored models at scale and improve overall trust in AI systems.
The post Detecting backdoored language models at scale appeared first on Microsoft Security B...
Crypto doesn’t wait for your next scheduled course Crypto and crime are moving faster than most training programs can keep…
The post Meet the New Chainalysis Academy: Where Learning Becomes Mastery appeared first on Chainalysis.
The results of our soon-to-be-published Advanced Cloud Firewall (ACFW) test are hard to ignore. Some vendors are failing badly at the basics like SQL injection, command injection, Server-Side Request Forgery (SSRF) and API abuse with block percentages under 20%, sometimes way under. Those are just t...
Read the latest DFIR news – SANS DFIR Summit registration opens, Volatility 3 v2.27.0 released, ADF Solutions on modern digital triage, Tony Blair Institute proposals on facial recognition and more.
The U.S. military digitally disrupted Iranian air missile defense systems during its operation last year against the country’s nuclear program, some of the most sophisticated action Cyber Command has taken to date against Iran.
SystemBC malware linked to 10,000 infected IPs, posing risks to sensitive government infrastructure
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
When “Secure by Design” Fails at the Edge Firewalls are still widely treated as the first and final line of defense. Once deployed, configured, and updated, they are often assumed to be a stable control that quietly does its job in the background. Recent ransomware incidents suggest that the assumpt...
Email attachments remain one of the most trusted entry points into enterprise environments. Despite years of awareness training and secure email gateways, attackers continue to rely on documents because they blend seamlessly into everyday workflows. New reporting from The Hacker News details how APT...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Rui-Siang Lin, a Taiwanese national, was sentenced to 30 years in U.S. federal prison for operating Incognito Market, one of the world’s largest illicit online narcotics marketplaces. Incognito Market splash page and graphical interface Incognito Market operated on the dark web from October 2020 unt...