> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A new free vulnerability database for maritime systems has been launched, indexing nearly 30,000 vulnerabilities, highlighting ongoing concerns in the maritime sector. In Ukraine, attackers exploited weaknesses in Dahua IP cameras, emphasizing the risks associated with remote surveillance systems. A significant vulnerability in Microsoft Authenticator for Android has been identified, allowing rogue apps to hijack work accounts. Rapid7's report indicates that 71% of vulnerability exploits occur within a week of disclosure, stressing the urgency for organizations to patch flaws quickly. Additionally, the University of New Mexico Health System faced a major cyber incident that forced patient diversions and clinic closures, underscoring the real-world impact of cyber threats.
|
// AI-powered summary generated at 08:00
ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit
Osaka Metropolitan University said on Tuesday that the outage left its internal network, email and a range of administrative and academic systems unavailable.
BYOD, prestataires : la MFA protège l'identité, pas l'appareil. Comment vérifier la posture d'un appareil non géré sans l'enrôler dans un MDM ?
Le post BYOD, prestataires : comment faire confiance à un appareil que vous ne gérez pas ? a été publié sur IT-Connect.
It was discovered that the Go x/net/idna package incorrectly handled
certain Punycode-encoded labels that decoded to ASCII-only labels. An
attacker could possibly use this issue to bypass hostname-based access
controls and escalate privileges.
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.
The post FBI Blames Contractor’s Missed Patch for ShinyHunters Breach appeared first on SecurityWeek.
ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.
Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score of 8....
RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk. Acronis outlines eight controls MSPs should test when evaluating RMM software, from patching and privileged access to recovery and tenant isolation. [...]
Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails
Rogue OpenAI agents made unauthorized edits on Wikimedia wikis and sent millions of automated requests to Wikimedia’s public APIs, traffic that may have contributed to a partial outage of the Wikidata Query Service in May, the Wikimedia Foundation said on Monday. “The Wikimedia Foundation conducted...
Anaconda has announced new capabilities across the Anaconda Platform that pair agentic development with autonomous security testing. The expansion brings agent swarms and autonomous red-team agents together with trusted packages, models, and environments to help builders ship faster and address secu...
CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.
AppViewX has expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every agent, whether sanctioned or shadow; govern their posture and maintain audit-ready activity logs; and monitor and control in real time every action that the agent performs. AppViewX now...
New Relic has announced New Relic Ground Truth CLI augmented with New Relic Autopilot API, bringing headless observability straight to developers and AI agents in their natural workflows. The new command-line interface (CLI) allows teams to investigate production issues, assess recovery criteria, an...
MalExt Sentry recense près de 7 000 extensions Chrome et Edge malveillantes ou retirées des stores, avec des outils pour vérifier vos propres navigateurs.
Le post MalExt : une liste open source avec près de 7 000 extensions Chrome malveillantes a été publié sur IT-Connect.
SailPoint has announced significant new capabilities across SailPoint Agentic Fabric (SAF) and SailPoint Human Fabric (SHF), the two purpose-built products of its Identity Security solution, built on SailPoint Atlas. These innovations give enterprises visibility into every hidden AI tool, continuous...
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Run the CLI in autopilot mode and take your chances
Intellias has launched Agentic ServiceOps a managed IT service that applies governed agentic AI across IT service management (ITSM) and IT operations management (ITOM), from the service desk to the infrastructure behind it. It helps organizations resolve more IT work end to end, breaking the link be...
It was discovered that Tesseract incorrectly handled crafted .traineddata
models. An attacker could possibly use this issue to cause Tesseract to
crash, resulting in a denial of service. (CVE-2026-73067)
It was discovered that Tesseract did not properly validate dimensions in
crafted .traineddata m...