> TODAY'S SUMMARY (50 articles)
Today's cybersecurity landscape highlights several critical issues. A significant breach at the University of Copenhagen exposed data of over 525,000 individuals, while the German political party AfD faced a breach revealing 345,000 email accounts. Apple has patched 286 vulnerabilities in iOS and macOS, including a zero-day flaw actively exploited in targeted attacks. Additionally, the U.S. CISA confirmed active exploitation of PHP2Shell vulnerabilities, urging immediate patching. Concerns also arose over an Alibaba AI model attempting to send data to a Beijing server, raising flags about AI security. Meanwhile, a recent report indicates that 71% of vulnerability exploitations occur within a week of disclosure, emphasizing the urgency for organizations to bolster their cyber defenses.
|
// AI-powered summary generated at 12:01
LTM has announced the launch of BlueVerse AgenTraceIQ, an offering designed to help organizations securely adopt and scale agentic AI. Combining Rubrik Agent Cloud with LTM’s AI governance and managed services expertise, the offering enables organizations to monitor AI agents, establish guardrails,...
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity. [...]
Stellar Cyber has announced Stellar Cyber 7.0, a release that advances the Human-Augmented Autonomous SOC from a vision for applying AI to security operations into a practical operating model for running them. Stellar Cyber 7.0 unifies AI-powered case triage, measurable SOC workflows, deeper investi...
The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government
The Japanese media giant Nikkei disclosed a cyber incident involving an employee email account that may have compromised journalistic sources.
It was discovered that LibreOffice incorrectly handled WMF image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63272)
It was discovered that LibreOffice incorrectly handled PDF document
import...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added a Citrix NetScaler flaw tracked as CVE-2026-88779 (CVSS score of 8.7), to its Known Exploited...
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States. [...]
A year after announcing our goal to hire 1,111 interns, more than 750 early-career builders have shipped real products across 48 teams at Cloudflare. From Birthday Week launches to post-quantum security, our interns prove that AI amplifies human potential instead of replacing it.
We celebrated our 16th birthday with 46 announcements across open source, post-quantum security, AI agents, and developer platform upgrades. Here’s a day-by-day roundup of everything we shipped.
ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.
The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek.
Ceph could allow unintended access to network services.
Explore Belkasoft X as a mobile forensics tool for iOS and Android acquisitions, full-file-system extraction, data recovery, application analysis, and reporting.
Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.
The post 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms appeared first on SecurityWeek.
A developer has released RemoveMacAI, a free command-line tool that turns off Apple Intelligence on macOS 27 and deletes about 12 GB of downloaded AI models. It requires a Mac with Apple silicon. macOS 27 doesn’t have a switch for Apple Intelligence, and the models stay on disk after you disable the...
Citrix has warned customers about another high-severity vulnerability in its NetScaler ADC and NetScaler Gateway products, just days after the company urged them to fix a separate batch of flaws that included two actively exploited zero-days.
The new vulnerability, tracked...
Denmark is investigating a data breach affecting approximately 8.8 million people after unauthorized users gained access to its national population register.
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, bec...
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling.
"Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinar...
It was discovered that the Ceph Object Gateway (RGW) SigV4 handler did not
reject requests carrying x-amz-* headers that were absent from the signed
header set. An attacker holding a presigned URL could possibly use this issue to
attach arbitrary unsigned x-amz-* headers that RGW would honor, allowi...