> TODAY'S SUMMARY (23 articles)
Today's cybersecurity news highlights several significant threats and trends:
1. A data leak at the State Bank of India exposed 3,897 customer records on the dark web, raising concerns about the source and integrity of the data.
2. The U.S. CISA has added vulnerabilities affecting Plex2Shell, Siemens, and SiteGuard to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply patches promptly.
3. Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which could allow unauthenticated remote code execution, have leaked, prompting an emergency patch release.
4. A Belarus-aligned hacktivist group has infiltrated a Russian healthcare organization for nearly two years, utilizing a backdoor hidden in VMware Tools.
5. Stolen keys from UpdraftCentral have been used to backdoor WordPress sites, emphasizing the risks associated with developer account compromises.
Overall, the day reflects ongoing vulnerabilities in software and infrastructure, alongside significant breaches affecting both financial institutions and web services.
|
// AI-powered summary generated at 08:00
British authorities are rolling out Report Fraud, a platform intended to win back public trust over how law enforcement responds to widespread cybercrime and fraud.
Prompt injection for the win Anthropic has fixed three bugs in its official Git MCP server that researchers say can be chained with other MCP tools to remotely execute malicious code or overwrite files via prompt injection.…
Canada’s Investment Regulator Confirms Data Breach Affecting 750,000 Investors The Canadian Investment Regulatory Organization (CIRO) has confirmed that a sophisticated phishing attack it suffered in August 2025 impacted approximately 750,000 Canadian investors. After more than 9,000 hours of forens...
At its core, Chainalysis is a data company with a dataset that maps the global cryptocurrency ecosystem, providing unmatched intelligence…
The post Introducing Workflows: No-Code Automation for Data-Scientist-Level Blockchain Insights appeared first on Chainalysis.
The National Cyber Security Centre highlighted the group known as NoName057(16) and other Russia-aligned operations that have targeted U.K. websites.
Endace has announced the release of OSm 7.3, a major software update that makes network packet data faster, more affordable, and more user-friendly. Faster search, API-driven automation, and instant forensics With threats evolving at unprecedented speed and regulations like DORA, GDPR, HIPAA, and PC...
Group-IB says crims forking out for Dark LLMs, deepfakes, and more at subscription prices Cybercrime has entered its AI era, with criminals now using weaponized language models and deepfakes as cheap, off-the-shelf infrastructure rather than experimental tools, according to researchers at Group-IB.…
What is ECDSA? ECDSA, which stands for Elliptic Curve Digital Signature Algorithm, is a type of cryptographic algorithm that is used for the purpose of authenticating the message content. It is called elliptic curve cryptography, and its foundation is the elliptic curves mathematics that ensures ver...
Weaponized AI is fueling a new wave of cybercrime, said Group-IB in its latest report
Providing cyberespionage and remote code execution capabilities, the malware is executed via DLL sideloading.
The post APT-Grade PDFSider Malware Used by Ransomware Groups appeared first on SecurityWeek.
Eighteen months ago, it was plausible that artificial intelligence might take a different path than social media. Back then, AI’s development hadn’t consolidated under a small number of big tech firms. Nor had it capitalized on consumer attention, surveilling users and delivering ads.
Unfortunately,...
The Problem: The Identities Left Behind
As organizations grow and evolve, employees, contractors, services, and systems come and go - but their accounts often remain. These abandoned or “orphan” accounts sit dormant across applications, platforms, assets, and cloud consoles.
The reason they persist...
Cybersecurity researchers have disclosed details of a malware campaign that's targeting software developers with a new information stealer called Evelyn Stealer by weaponizing the Microsoft Visual Studio Code (VS Code) extension ecosystem.
"The malware is designed to exfiltrate sensitive information...
Google-owned AdMob allegedly collected kids' data for ads without parental consent—including IP addresses, usage data, and exact locations.
Security researchers have uncovered a malicious browser extension campaign, dubbed CrashFix, that deliberately crashes victims’ browsers and then uses the resulting confusion to trick users into running attacker-supplied commands.The activity, attributed to a threat cluster Hu...
Radware has unveiled the launch of its Radware API Security Service, an end-to-end solution designed to protect APIs throughout their entire lifecycle using real-time production traffic. Radware API Security Service offers APIs advanced protection against the OWASP Top 10 API Security Risks, includi...
Digital forensic triage can turn CSAM investigations from months into hours—prioritizing critical evidence on-scene, cutting lab backlogs, and helping investigators safeguard children faster and more effectively.
Sophos has announced Sophos Workspace Protection, expanding its portfolio to help organizations secure hybrid work and govern the use of emerging technologies, including AI. Built around the Sophos Protected Browser, powered by Island, the solution enables organizations to protect applications, data...
Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment (ACME) validation logic that made it possible to bypass security controls and access origin servers.Â
"The vulnerability was rooted in how our edge network processed requests destined for the...
The rise of malicious bots is changing how the internet operates, underscoring the need for stronger safeguards that keep humans firmly in control. Bots now account for more than half of global web traffic, and a new class of “predator bots” has emerged, unleashing self-learning programs that adapt...