> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of PHP vulnerabilities, specifically the PHP2Shell flaws, which could enable remote code execution. A significant cyberattack on the University of New Mexico disrupted hospital operations, showcasing the ongoing risks to healthcare systems. In the online retail sector, nearly 1,000 stores were compromised with scanner-evading malware. Furthermore, the rise of AI-generated fake login pages is making phishing more effective, while the recent deepfake incident involving a UK politician underscores the dangers of misinformation and digital impersonation. Lastly, vulnerabilities in major software products, including Microsoft and Citrix, continue to pose substantial risks to organizations.
|
// AI-powered summary generated at 16:00
Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions
OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you're generating images. [...]
Here’s what it would take: stronger defenses for large utilities, hands-on help for smaller systems and federal support to make both happen.
The post The US needs a real plan to defend its water systems appeared first on CyberScoop.
CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program in MicroPython or Arduino C++ and extend with plug-in hardware. Insert a SIM and it makes real calls and sends real texts. For anyone who tests or tinkers with de...
Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update. [...]
Intruders retrieved email addresses from superseded tech kept running for an internal system
Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks
MI5 warns UK universities that over 100 academics may have unknowingly worked on research funded by a Chinese institute linked to the MSS. On September 30, MI5 published a formal warning naming the China General Technology Research Institute, CGTRI, also called CAGT in some translations, as an outfi...
A breach at school software provider Frontline Education has exposed employee data
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June 25 getting arrested in Montenegro, and this week a Montenegrin court signed off on sending him to the United States. He’s a dual Turkish and Irani...
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]
In its roughly 30-year history, the CISO role has been reshaped by waves of new technology and rising cyber threats.
In many organizations, CISOs now own risk reporting, information risk management, threat monitoring, cyber risk accountability and governance, and security s...
Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company has not specified a rollout date or detailed how the controls w...
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.
The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th...
doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own private, secure networks, communicate with no servers in the middle, and get started with no personal information required. The platform gives agents an environme...
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page for Google’s OSS VRP states that...
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety veteran David Robinson knows how his resignation looks. He starts his essay by calling himself “something of a cliché”: an AI company employee who q...
L'application Word de Microsoft 365 Apps enregistrait certains PDF destinés à SharePoint Online dans un dossier local au lieu du Cloud. Attention à vos données.
Le post Word : un bug envoyait les PDF destinés à SharePoint dans un dossier de cache en local a été publié sur IT-Connect.
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
The post Alleged ShinyHunters Leader Arrested in Jordan appeared first on SecurityWeek.
A list of topics we covered in the week of September 28 to October 4 of 2026