> TODAY'S SUMMARY (130 articles)
Today's cyber news highlights several significant threats and trends. The largest cryptocurrency heist in history occurred as North Korean hackers stole approximately $6.3 billion from Binance by exploiting a compromised DevOps laptop. In retail, fashion retailer Resolve reported the theft of customer payment card information due to a security breach. Additionally, a malicious update to the Claude Code extension for VS Code was found to have installed persistent SSH backdoors on developers' machines. Exploits targeting critical vulnerabilities in Drupal and GitLab are actively being leveraged by attackers, raising concerns about web security. Lastly, hackers published sensitive data of over 41,000 DHS employees, emphasizing the ongoing risks to government cybersecurity.
|
// AI-powered summary generated at 20:00
Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor
KB5127936 : menu contextuel personnalisable, Cloud rebuild, CLAT pour IPv6 et correctif Always On VPN. Voici l'essentiel de la mise Ă jour Windows 11 d'octobre.
Le post Windows 11 KB5127936 : beaucoup de changements et le menu contextuel devient personnalisable a été publié sur IT-Connect.
Dès le 15 janvier 2027, Intune n’utilisera plus le CNAME EnterpriseEnrollment pour l’inscription Windows MDM-only. Qui est concerné et comment s’y préparer ?
Le post EnterpriseEnrollment : ce qui change pour l’inscription des postes Windows dans Intune a été publié sur IT-Connect.
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.
The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog.
Le PAM face aux identités non humaines : comment limiter les droits des agents IA et des comptes de service, et tracer leurs actions.
Le post Le PAM face au défi des identités non humaines a été publié sur IT-Connect.
We explain how to download and read ebooks safely, whether a device can be infected through an ebook, and why pirate libraries and free-book sites are dangerous.
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]
Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups call it a federal power play.
The post California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from fede...
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems
319 Chrome extensions sent search queries through servers controlled by their operators, allowing them to see what users searched for.
This story is interesting:
One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.
Among the pre-installed bloatware—Âor spyware, if you...
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host.
A malicious or compromised host can...
The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited.
The post Defense contractor pleads guilty to aiding North Korean remote worker scheme appeared first on CyberScoop.
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek.
Brotli could be made to crash or run programs if it received specially crafted input.
Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.
The post In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak appeared first on SecurityWeek.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]
Ahmad Umar Agha is best known for posting a fake Associated Press tweet claiming President Obama was injured in a White House bombing.
The post Syrian hacker who served Assad regime gets 42 months in US prison appeared first on CyberScoop.
Ahmad Umar Agha, known online as “Th3Pr0,” was sentenced Thursday in federal court in Virginia to 42 months behind bars for his role in a conspiracy that was organized by former Syrian President Bashar al-Assad's closest advisers.