> TODAY'S SUMMARY (7 articles)
Today's cyber news highlights several key threats and trends. Hackers are increasingly targeting AI systems, as demonstrated by a recent incident where credentials were stolen, leading to $740,000 in unauthorized compute usage for a cloud provider. Microsoft researchers revealed vulnerabilities in AI models, showing that attackers can create backdoors by manipulating just a few neurons. Additionally, recent updates for Slackware address critical security issues, including remote code execution and memory errors in their httpd and Git packages. The ongoing risk of vehicle hacking is underscored by a podcast discussing how attackers can gain control over car systems. As cyber threats evolve, organizations must prioritize robust security measures against these emerging vulnerabilities.
|
// AI-powered summary generated at 04:00
Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its persistence across different devices. [...]
The FBI says hacks that trick ATMs into spitting out cash on demand are rising, with hundreds of attacks in the past year alone netting hackers millions in stolen bills.
Cellebrite, which makes phone unlocking and hacking tools, stopped sales to countries that allegedly abused its tools. But after new allegations in Jordan and Kenya, the company has changed its approach.
Highlights
The Perimeter is Porous: Modern Agentic AI and the Model Context Protocol (MCP) have effectively turned internal data centers inside out, making the "internal API" security model obsolete.
The "Confused Deputy" Risk: Legitimate AI agents act as trusted internal entities but can be exploi...
Are Non-Human Identities the Key to Unlocking Agentic AI in Data Protection? Organizations across industries are increasingly focusing on the management of Non-Human Identities (NHIs). These machine identities, akin to digital passports, play a pivotal role in cybersecurity by managing encrypted pas...
This week, the US National Institute of Standards and Technology (NIST) announced a new listening exercise, the AI Agent Standards Initiative, which it hopes will provide a roadmap for addressing agentic AI hurdles and, it said, ensure that the technology “is widely adopted wi...
How Secure Are Your Machine Identities? Non-Human Identities (NHIs) play a pivotal role in cybersecurity. Where businesses continue transitioning to cloud environments, the importance of protecting these machine identities becomes paramount. But how secure are your NHIs, and what measures are you im...
Is Your Organization Ready for Agentic AI in Cybersecurity? Where cyber threats are becoming increasingly sophisticated, the use of Agentic AI in cybersecurity is transforming how industries like financial services handle their security protocols. But what exactly does this mean for your organizatio...
Google said it prevented 1.75 million bad apps from going live on Google Play during 2025, a figure that's down from previous years.
How Can Organizations Leverage Non-Human Identities for Better Security? Have you ever wondered how Non-Human Identities (NHIs) are reshaping cybersecurity? With cyber threats evolve, organizations must prioritize the management of NHIs, especially when operating in cloud environments. NHIs serve as...
In a flash alert on Thursday, the FBI said it has tracked more than 1,900 ATM jackpotting incidents since 2020 and over 700 in 2025 that involved more than $20 million in losses.
Several security issues were fixed in the Linux kernel.
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image backend are affected. For the oldstable d...
Dragos's Rob Lee said Volt Typhoon is "still very active, and they're still absolutely mapping out and getting into embedding in U.S. infrastructure, as well as across our allies.”
Governments and businesses have a shared interest in seeing post-quantum encryption broadly adopted throughout society.
The post State Dept. official says post-quantum transition plans will outlive current leadership appeared first on CyberScoop.
Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been...
A buffer overflow was discovered in libvpx, a library implementing the VP8/VP9 open video codecs, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1.12.0-1+deb12u5.
West Virginia sued Apple for allegedly allowing iCloud to be used to disseminate and store child sexual abuse content.
Session 12D: ML Backdoors
Authors, Creators & Presenters: Hanlei Zhang (Zhejiang University), Yijie Bai (Zhejiang University), Yanjiao Chen (Zhejiang University), Zhongming Ma (Zhejiang University), Wenyuan Xu (Zhejiang University)
PAPER
BARBIE: Robust Backdoor Detection Based On Latent Separab...
A heap-based buffer overflow was discovered in the RGBE/HDR parser of GEGL, a graph-based image processing library, which could result in denial of service or the execution of arbitrary code if malformed files are processed. For the oldstable distribution (bookworm), this problem has been fixed