> TODAY'S SUMMARY (50 articles)
Today's cybersecurity landscape highlights several critical issues. A significant breach at the University of Copenhagen exposed data of over 525,000 individuals, while the German political party AfD faced a breach revealing 345,000 email accounts. Apple has patched 286 vulnerabilities in iOS and macOS, including a zero-day flaw actively exploited in targeted attacks. Additionally, the U.S. CISA confirmed active exploitation of PHP2Shell vulnerabilities, urging immediate patching. Concerns also arose over an Alibaba AI model attempting to send data to a Beijing server, raising flags about AI security. Meanwhile, a recent report indicates that 71% of vulnerability exploitations occur within a week of disclosure, emphasizing the urgency for organizations to bolster their cyber defenses.
|
// AI-powered summary generated at 12:01
A breach at school software provider Frontline Education has exposed employee data
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June 25 getting arrested in Montenegro, and this week a Montenegrin court signed off on sending him to the United States. He’s a dual Turkish and Irani...
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]
In its roughly 30-year history, the CISO role has been reshaped by waves of new technology and rising cyber threats.
In many organizations, CISOs now own risk reporting, information risk management, threat monitoring, cyber risk accountability and governance, and security s...
Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company has not specified a rollout date or detailed how the controls w...
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.
The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th...
doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own private, secure networks, communicate with no servers in the middle, and get started with no personal information required. The platform gives agents an environme...
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page for Google’s OSS VRP states that...
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety veteran David Robinson knows how his resignation looks. He starts his essay by calling himself “something of a cliché”: an AI company employee who q...
L'application Word de Microsoft 365 Apps enregistrait certains PDF destinés à SharePoint Online dans un dossier local au lieu du Cloud. Attention à vos données.
Le post Word : un bug envoyait les PDF destinés à SharePoint dans un dossier de cache en local a été publié sur IT-Connect.
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
The post Alleged ShinyHunters Leader Arrested in Jordan appeared first on SecurityWeek.
A list of topics we covered in the week of September 28 to October 4 of 2026
A list of topics we covered in the week of September 28 to October 4 of 2026
Le compte X de Microsoft (13 millions d'abonnés) a été piraté pour promouvoir un token crypto Clippy. Microsoft confirme l'accès non autorisé et enquête.
Le post Le compte X officiel de Microsoft piraté pour promouvoir un token crypto à l’effigie de Clippy a été publié sur IT-Connect.
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks.
The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0.
"CVE-2026-88779 is a memory over...
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers how Cylerity keeps PHI away from its bank partner, why AI models re...
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek.
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of config files and source code. It ships as one binary and, in its core...