> TODAY'S SUMMARY (133 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The LiteLLM project was compromised, leading to the distribution of malware designed to steal sensitive credentials. The Indian certificate authority eMudhra is withdrawing from the SSL/TLS market after its private keys were found to be trivially guessable, prompting major tech firms to block its certificates. A significant vulnerability in Signal could expose users' audio and video after call hang-ups, necessitating immediate updates. Additionally, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are now being exploited widely, with attempts detected before public disclosure. Organizations are urged to bolster defenses against a limited range of critical vulnerabilities often targeted by attackers.
|
// AI-powered summary generated at 20:01
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
aiohttp 3.9.1 - directory traversal PoC
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
Docker Desktop 4.44.3 - Unauthenticated API Exposure
De multiples vulnérabilités ont été découvertes dans GLPI. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une injection SQL (SQLi) et une falsification de requêtes côté serveur (SSRF).
La société Gozo Channel a été victime d'une attaque cybernétique qui a perturbé ses systèmes informatiques internes, mais les opérations de ferry n'ont pas été affectées. Les équipes techniques travaillent à rétablir les systèmes administratifs touchés et à assurer le retour à une pleine capacité op...
In May 2025, Red Hat Enterprise Linux 10 (RHEL) shipped with the first steps toward post-quantum cryptography (PQC) to protect against attacks by quantum computers, which will make attacks on existing classic cryptographic algorithms such as RSA and elliptic curves feasible. Cryptographically releva...
A cyberattack was claimed by Play on February 7.
Master Millwork, LLC experienced a data security incident between February 1, 2026, and February 5, 2026, resulting in unauthorized access to certain information. The types of information potentially affected include names, Social Security numbers, driver's license/state ID numbers, and financial ac...
Don't relax: This is a 'when, not if' scenario AI agents and other systems can't yet conduct cyberattacks fully on their own - but they can help criminals in many stages of the attack chain, according to the International AI Safety report.…
La société Gex Corporation a annoncé avoir été victime d'une attaque par rançongiciel sur ses serveurs. L'incident a été découvert le 4 février, lorsque des fichiers sur certains de ses serveurs ont été chiffrés, et a été confirmé comme étant une attaque par rançongiciel.
Senator Maria Cantwell, D-Wash., wants hearings to force AT&T and Verizon to disclose how they’ve responded to the hacks to protect telecom networks.
The post Cantwell claims telecoms blocked release of Salt Typhoon report appeared first on CyberScoop.
Moltbot, the viral AI agent, offers immense power but is riddled with critical vulnerabilities, including remote code execution (RCE), exposed control interfaces, and malicious extensions. Read on to understand the vulnerabilities associated with Moltbot and the immediate security practices users mu...
Several security issues were fixed in Filelock.
Several security issues were fixed in FreeRDP.
How Do Non-Human Identities Reinforce Data Protection? How does one ensure that machine identities remain secure from cyber threats? This query emerges as organizations navigate the intricate web of digital systems, grappling with data protection complexities. The management of Non-Human Identities...
Are Organizations Fully Equipped to Manage Their Non-Human Identities (NHIs) Efficiently? Ensuring robust management of Non-Human Identities (NHIs) is a top priority for organizations. NHIs, essentially machine identities, play a critical role in organizational cybersecurity strategies. They consist...
Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company's team of executives. [...]
What Makes Non-Human Identities Critical for Cloud Security? Have you considered how organizations can effectively secure their digital assets in cloud platforms? While we delve deeper into the digital space, the focus on securing data through robust Non-Human Identity (NHI) management has become pa...