> TODAY'S SUMMARY (47 articles)
Today's cybersecurity landscape highlights a growing concern over AI-driven threats. The UK's National Cyber Security Centre (NCSC) warns that AI-powered attacks, particularly in ransomware, could target critical infrastructure by 2028, as legacy systems remain vulnerable. Meanwhile, a significant breach at Revolve has compromised the card details of up to 1.5 million customers, and a data breach at Harvard University has exposed 851,000 accounts. On the botnet front, Google has dismantled the XCPE botnet, which leveraged over 1.3 million devices for malicious activities. Additionally, ongoing exploitation of critical vulnerabilities, such as those in Siemens IoT devices and CryptoPayment Gateway plugins, underscores the urgent need for robust cybersecurity measures. The prevalence of AI in both attacks and defenses continues to shape the threat landscape, necessitating immediate action from organizations.
|
// AI-powered summary generated at 12:00
Une vulnérabilité a été découverte dans CPython. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
La Caisse Nationale d'Assurance Sociale (CNAS) a signalé des perturbations temporaires de ses services électroniques suite à une cyberattaque sur ses systèmes d'information. L'institution conseille aux utilisateurs de faire preuve de vigilance, de ne pas fournir de données personnelles par téléphone...
Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données.
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Binance, the world's largest cryptocurrency exchange, confirmed Thursday that it had been hacked in a $6.3 billion cyber heist that blockchain investigators are blaming on North Korea.
OpenAI says it won't reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. [...]
Embedded browsers are at the heart of the problem
Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security incident after billions of dollars in cryptocurrency moved from wallets linked to the exchange on October...
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]
Some estimates say hackers stole billions in crypto from Binance, the world's largest cryptocurrency exchange, during a cyberattack on Thursday.
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT. [......
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...]
The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer failures that spoiled food at US military bases in August as a suspected cyberattack, according to four offi...
TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead to remote code execution. Threat actors are already actively attempting t...
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. [...]
A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home.
The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop.
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in denial of service, cross-site scripting, SQL injection, information disclosure, privilege escalation or remote code execution. For the stable distribution (trixie), these problems have been fixed in