> TODAY'S SUMMARY (47 articles)
Today's cybersecurity landscape highlights a growing concern over AI-driven threats. The UK's National Cyber Security Centre (NCSC) warns that AI-powered attacks, particularly in ransomware, could target critical infrastructure by 2028, as legacy systems remain vulnerable. Meanwhile, a significant breach at Revolve has compromised the card details of up to 1.5 million customers, and a data breach at Harvard University has exposed 851,000 accounts. On the botnet front, Google has dismantled the XCPE botnet, which leveraged over 1.3 million devices for malicious activities. Additionally, ongoing exploitation of critical vulnerabilities, such as those in Siemens IoT devices and CryptoPayment Gateway plugins, underscores the urgent need for robust cybersecurity measures. The prevalence of AI in both attacks and defenses continues to shape the threat landscape, necessitating immediate action from organizations.
|
// AI-powered summary generated at 12:00
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying ​Grindr users' sensitive data to advertisers.
The administrative penalty is the largest issued by the data protection watchdog, arguing the case...
Lattice Semiconductor has released version 5.0 of its Lattice Sentry solution stack, adding post-quantum cryptography (PQC) to its platform firmware resilience (PFR) and attestation capabilities. The update provides CNSA 2.0-aligned, NIST-compliant protection for AI data centers and critical infrast...
Advertising company Xandr has been fined $9.6 million over data sharing that could reveal Grindr users’ sexual orientation.
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
Ridge Security has announced RidgeOne, a self-contained solution that brings autonomous AI-powered penetration testing and agentic red teaming to mid-sized organizations. Combining Ridge Security’s RidgeGen agentic security validation platform with an open-weight AI model running on NVIDIA DGX Spark...
Ahold Delhaize, the Dutch multinational retailer, announced it was taking precautionary measures following a cybersecurity incident, with stores in the U.S., Netherlands and Belgium reportedly impacted.
Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware
Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.
The post Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns appeared first on SecurityWeek.
The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next.
With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate....
Retail giant Ahold Delhaize takes systems offline after cyberattack Ahold Delhaize, the parent company of Food Lion, Stop & Shop, Giant Food, Hannaford, Albert Heijn and Delhaize, confirmed it was forced to take some systems offline after a cybersecurity incident in its network. While stores rem...
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous in...
Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an organization’s own infrastructure. IT teams can...
A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
The post XWorm RAT Evolves Into Surveillance Platform appeared first on SecurityWeek.
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.
LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.
The chain was tested on...
Dès novembre 2026, Microsoft Teams pourra afficher des alertes en réunion grâce à des outils tiers de détection de deepfakes. Voici ce qui va changer.
Le post Microsoft Teams ouvre la porte aux détecteurs de deepfakes : ce qui change en novembre a été publié sur IT-Connect.
IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.
The post AI Turns Familiar Cyberattacks Into a Race Against Time appeared first on SecurityWeek.
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I remember the name of that AI doco now - The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the ot...
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek.