> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape reveals significant threats across various sectors. Capcom confirmed a data breach exposing 11.7 million user accounts, emphasizing the risks associated with gaming platforms. In a concerning trend, an attacker compromised Microsoft 365 accounts at 79 organizations without needing passwords, utilizing replayed sign-in sessions and hidden inbox rules. Vulnerabilities in PHP continue to be exploited, with millions of attack attempts related to PHP2Shell and newly discovered RCE flaws prompting urgent patching. Additionally, Russian-linked hackers have launched destructive attacks in Ukraine, while compromised TLS certificates from eMudhra Limited highlight the ongoing risks in digital trust infrastructure. The rise of AI in cybersecurity is also notable, with AI tools being used both defensively and as vectors for new attacks.
|
// AI-powered summary generated at 12:01
AgnĂšs Pannier-Runacher ciblĂ©e par un logiciel espion : trois alertes Apple et une enquĂȘte judiciaire en cours.
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...]
Des Ledger modifiés interceptent les phrases de récupération. Le pirate est passé par un fournisseur ?
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using DeepSeek implementations," under a Department of Homeland Security order.
They may also no longer buy information technology produ...
Un ingĂ©nieur dâOpenAI soupçonnĂ© dâĂ©coute clandestine : appareils cachĂ©s, requĂȘtes Ă lâIA et enquĂȘte du FBI.
Créez un timer systemd sur Debian pour planifier vos tùches : service, timer, syntaxe OnCalendar, rattrapage et logs. Avec un comparatif complet face à cron.
Le post Linux : planifier des tùches avec les timers systemd sur Debian a été publié sur IT-Connect.
Modern Warfare 4 : un contournement de licence de la campagne PC est signalé avant la sortie du 23 octobre.
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from.
The state-owned bank, India's largest, said in a stock-exchange filing dated October 21 that it "...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell.
The vulnerabilities are listed below -
C...
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek.
CVSSv3 Score:
9.8
CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. Th...
Deux failles critiques dans PHP ont fuité avant l'heure. Un correctif d'urgence est attendu le 21 octobre à 16 h. Voici ce que l'on sait et comment se préparer.
Le post PHP : deux failles critiques ont fuitĂ© avant lâheure, un correctif dâurgence arrive ce 21 octobre ! a Ă©tĂ© publiĂ© sur IT-Connect.
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization.
According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy, which is also known as the Cyber Partisa...
Researchers say the developerâs account was compromised in March with a GlassWorm-linked loader.
The post Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI appeared first on SecurityWeek.
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care doesnât work like that anymore. A patch or smartwatch records the electrocardiogram (ECG). A phone or gateway re...
Citizen Lab confirmed Pegasus on a Serbian rectorâs iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirming that the iPhone of Vladan ÄokiÄ, Rector of the University of Belgrade, was infected with NSO Groupâs Pe...
Le noyau Linux 7.3 est sorti avec un record de 18 765 commits signés par 3 021 développeurs. Mais alors, quelles sont les nouveautés à retenir ?
Le post Linux 7.3 : record historique de commits pour le noyau, voici les nouveautés a été publié sur IT-Connect.
DevGuard is a free, open source vulnerability management platform that collects a software projectâs security findings in one place, ranks them by risk, and tracks them. Itâs an OWASP Incubating Project, and anyone can self-host it. One command line, six scans DevGuard runs secret scanning, static c...