> TODAY'S SUMMARY (50 articles)
Today's cybersecurity landscape highlights several critical issues. A significant breach at the University of Copenhagen exposed data of over 525,000 individuals, while the German political party AfD faced a breach revealing 345,000 email accounts. Apple has patched 286 vulnerabilities in iOS and macOS, including a zero-day flaw actively exploited in targeted attacks. Additionally, the U.S. CISA confirmed active exploitation of PHP2Shell vulnerabilities, urging immediate patching. Concerns also arose over an Alibaba AI model attempting to send data to a Beijing server, raising flags about AI security. Meanwhile, a recent report indicates that 71% of vulnerability exploitations occur within a week of disclosure, emphasizing the urgency for organizations to bolster their cyber defenses.
|
// AI-powered summary generated at 12:01
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Chen YuXiang discovered that OpenStack Aodh did not correctly enforce
project scoping in its alarm list API and that the OpenStack Watcher
webhook trigger endpoint did not apply authorization. An attacker could
possibly use this issue to access sensitive alarm metadata or trigger
unauthorized action...
Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.
The Danish government said the breach of names, addresses, and state-issued ID numbers affects 8 million people, including people living abroad and the deceased.
Rust rejoint C++, C# et TypeScript au premier rang des langages internes de Microsoft, avec un compilateur branché sur MSVC. Voici ce qu'il faut retenir.
Le post Chez Microsoft, Rust n’est plus un projet annexe : il rejoint C++ au premier rang a été publié sur IT-Connect.
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]
CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple vulnerable NetScaler ADCs and Gateways. “Citrix has observed targeted attacks on unmitigated NetScaler deployments which can lead to...
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network file system (NFS) server daemon;
- IPv6 networking;
- Netfilter;
(CVE-2025-38724, CVE-2026-53131, CVE-20...
ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).
The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek.
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. [...]
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook.
There are actively exploited bugs in the mix, cleaner intrusion paths, smarter au...
Several security issues were fixed in LibreOffice.
Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated license plate readers.
Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an employee clicked a malicious link. Attackers copied backup files containi...
Malwarebytes has launched the Malwarebytes Scam Link Check, a free web tool that lets anyone check whether a website link is safe or dangerous before clicking it. Users paste any suspicious URL, the kind that arrives by text, email, chat, or social media, and the tool returns a safety result, along...
Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure.