> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
Une vulnérabilité a été découverte dans GitLab AI Gateway. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Une vulnérabilité a été découverte dans Fortinet FortiClientEMS. Elle permet à un attaquant de provoquer une injection SQL (SQLi).
This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during September and OctoberCategories: Threat ResearchTags: EDR killer, infostealer, Ransomware
Une vulnérabilité a été découverte dans Microsoft Edge. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Le SI de la commune de Nosate a été victime d'une cyberattaque. L'administration a lancé un appel à la vigilance auprès de la population pour signaler toute communication suspecte.
Une attaque informatique a été signalée contre l'autorité de développement économique des îles Vierges, les responsables n'ont pas encore commenté l'incident, mais le gouverneur a confirmé l'attaque et une déclaration officielle est attendue. Les attaques de cyberransom sont de plus en plus fréquent...
It was discovered that libsoup did not correctly handle certain
URL-decoded input, which could allow for HTTP header injection. A remote
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2026-1467, CVE-2026-1536)
It was discovered that libsoup did n...
Une faille de sécurité chez YouX, une plateforme de logiciels utilisée par les constructeurs automobiles et les concessionnaires pour les financements de véhicules, a exposé les informations personnelles de 444 538 individus, dont 229 226 numéros de permis de conduire. Les hackers ont revendiqué avo...
Uniwersytet Warszawski potwierdził obecność złośliwego oprogramowania typu ransomware w swojej infrastrukturze IT, które zostało zidentyfikowane w styczniu 2026 roku. Wicepremier Krzysztof Gawkowski oraz rzeczniczka uczelni dr Anna Modzelewska zaznaczyli, że dotychczasowe ustalenia nie wskazują na n...
USN-8004-1 fixed vulnerabilities in FreeRDP. The update for
CVE-2026-23533 introduced a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Kim Dong Han discovered that FreeRDP did not correctly validate the size of
certain variables, which co...
PLUS: OpenClaw teams with VirusTotal; Crypto kidnappings in France; Critical vulns at SmarterMail; And more Infosec In Brief So-hot-right-now AI assistant OpenClaw, which is very much not secure right now, has teamed up with security scanning service VirusTotal.…
Multiple vulnerabilities have been discocvered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 4.4.13-0+deb13u1.
A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by analyzing URLs in typed commands and stopping their execution. [...]
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting  ù APT28 Leverages CVE-2026-21509 in Operation Neusploit Amaranth-Drag...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Italian university La Sapienza still offline to m...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Global Threat Map: Open-source real-time situational awareness platform Global Threat Map is an open-source project offering security teams a live view of reported cyber activity across the globe, pulli...
DKnife is a Linux toolkit used since 2019 to hijack router traffic and deliver malware in cyber-espionage attacks. Cisco Talos found DKnife, a powerful Linux toolkit that threat actors use to spy on and control network traffic through routers and edge devices. It inspects and alters data in transit...
OpenClaw (formerly Moltbot and Clawdbot) has announced that it's partnering with Google-owned VirusTotal to scan skills that are being uploaded to ClawHub, its skill marketplace, as part of broader efforts to bolster the security of the agentic ecosystem.
"All skills published to ClawHub are now sca...
Le TerraMaster F4 SSD est un NAS ultra-compact capable d'accueillir jusqu'à 4 disques SSD NVMe. Il est équipé de 8 Go de RAM DDR5 et d'une interface 5 GbE.
Le post Test TerraMaster F4 SSD : ce NAS compact peut accueillir 4 SSD NVMe a été publié sur IT-Connect.
L'accès aux extranets patients et médecins d'Asten Santé est temporairement suspendu pour raisons de sécurité. Les équipes techniques travaillent pour rétablir le service dans les meilleurs délais. Les équipes relations clients sont à disposition pour répondre aux questions.