> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of PHP vulnerabilities, specifically the PHP2Shell flaws, which could enable remote code execution. A significant cyberattack on the University of New Mexico disrupted hospital operations, showcasing the ongoing risks to healthcare systems. In the online retail sector, nearly 1,000 stores were compromised with scanner-evading malware. Furthermore, the rise of AI-generated fake login pages is making phishing more effective, while the recent deepfake incident involving a UK politician underscores the dangers of misinformation and digital impersonation. Lastly, vulnerabilities in major software products, including Microsoft and Citrix, continue to pose substantial risks to organizations.
|
// AI-powered summary generated at 16:00
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Lunex Unmasked: A New Information Stealer Deployed Through BYOVD  Storm-3168: Agentic-driven cloud attacks using compromised service principals  ...
A suspected ShinyHunters member arrested in Jordan is reportedly cooperating with the FBI, helping investigators track down the group. A suspected member of ShinyHunters, the group that claims to have stolen data on every FBI employee, was picked up in Jordan this week. The man is Saif al-Din Khader...
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going j...
Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. [...]
Hereâs an overview of some of last weekâs most interesting news, articles, interviews and videos: 16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Fake Zoom installer hides macOS backdoor CloudSyncD C...
Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs.
Warlock ransomware continues to exploit unpatched SharePoint flaws to breach water utilities, telecoms, governments, and universities worldwide. Warlock ransomware made headlines back in mid-2025 for exploiting a chain of SharePoint zero-days collectively dubbed ToolShell. More than a year later, th...
A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter.
Rey, whose real name is Saif âal-Din Khader, is said to have been brought into cu...
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.
The campaigns have impersonated prominent economists and AI...
Pathao, une plateforme de services de covoiturage et de livraison au Bangladesh, a confirmé avoir été victime d'un incident de cybersécurité survenu le 4 octobre 2026. Cet incident a permis à des acteurs malveillants d'obtenir des informations personnelles de certains utilisateurs, notamment leurs n...
Trump Mobile, une société de téléphonie mobile liée à la famille de Donald Trump, a été victime d'une cyberattaque par un groupe de ransomware nouvellement établi, BYOD. Cette attaque a entraßné l'exposition des données personnelles de 3 615 clients, incluant des noms, adresses e-mail, numéros de té...
Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...]
Le district scolaire d'Indiana a signalé un incident de cybersécurité survenu dimanche soir. Le directeur, Robert J. Heinrich Jr., a indiqué qu'à l'heure actuelle, il n'y a aucune indication que les informations des élÚves, du personnel ou les données financiÚres gérées par les systÚmes du district...
A federal judge ruled that a sheriffâs deputy violated a womanâs Fourth Amendment rights when using Flock to search for her license plate without a warrant.Â
A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]
By his own admission, David Robinson is âsomething of a clichĂ©â: an employee at a leading AI company who issues a dire warning while resigning from their job.
Exploitation attempts came from China-hosted IP, VulnCheck researcher says
Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat Labs found CloudSyncD while doing routine scanning on VirusTotal, buried inside a disguised Zoom client. They first spotted it on September 15, cl...
YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.