> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
Muneeb and Sohaib Akhter previously pleaded guilty to hacking into the State Department and other cybercrimes in 2015.
The post Twins with hacking history charged in insider data breach affecting multiple federal agencies appeared first on CyberScoop.
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Donât get pwned; get real-time alerts & prevent breaches #SecureYourSiteNormally, when someone sends feedback like this, I ignore it, but it happens often enough that it deserves an explainer, because the answer is really, r...
After a years-long battle, the European Commissionâs âChat Controlâ plan, which would mandate mass scanning and other encryption-breaking measures, at last codifies agreement on a position within the Council of the EU, representing EU States. The good news is that the most controversial part, the fo...
In a new example of how AI tools expand the attack surface of development machines, researchers found a serious remote code execution flaw in OpenAIâs Codex CLI, one of the most popular LLM-powered coding agents.
âThis vulnerability enables silent, repeatable remote code ex...
Hackers are exploiting a King Addons flaw (CVE-2025-8489) that lets anyone register and instantly gain admin privileges on WordPress sites. Hackers are exploiting a critical vulnerability, tracked as CVE-2025-8489 (CVSS score of 9.8), in the WordPress plugin King Addons for Elementor that allows una...
Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US. [...]
Finish reading this, then patch A maximum-severity flaw in the widely used JavaScript library React, and several React-based frameworks including Next.js allows unauthenticated, remote attackers to execute malicious code on vulnerable instances. The flaw is easy to abuse, and mass exploitation is "i...
Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain administrative permissions during the registration process. [...]
It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.3-...
Leroy Merlin is sending security breach notifications to customers in France, informing them that their personal data was compromised. [...]
Freedom Mobile, the fourth-largest wireless carrier in Canada, has disclosed a data breach after attackers hacked into its customer account management platform and stole the personal information of an undisclosed number of customers. [...]
332 responsables IT/CybersĂ©curitĂ© rĂ©vĂšlent aujourdâhui les expĂ©riences vĂ©cues face aux ransomwares par les entreprises du secteur manufacturier.
Kohler, the makers of a smart toilet camera, can access customers' data stored on its servers, and can use customersâ bowl pictures to train AI.
Currently, in order to provide basic DDoS protection and filter aggressive bots, some form of Content Delivery Network (CDN) is usually the simplest and most cost-effective way to protect a web application. In a typical setup, DNS is used to point clients to the CDN, and the CDN will then forward th...
The open-source code library is one of the most extensively used application frameworks. Wiz found vulnerable versions in around 39% of cloud environments.
The post Developers scramble as critical React flaw threatens major apps appeared first on CyberScoop.
The University of Pennsylvania and the University of Phoenix confirm they were hit in the Oracle E-Business Suite hacking campaign. The University of Pennsylvania (Penn) and the University of Phoenix confirmed they were hit in the recent cyberattack targeting Oracle E-Business Suite customers. Penn...
Marquis said ransomware hackers stole reams of banking customer data, containing personal information and financial records, as well as Social Security numbers, belonging to hundreds of thousands of people. The number of affected people is expected to rise.
L'Autorité de protection des données belge a publié une décision constatant des manquements à l'encontre d'un membre du Parlement flamand et échevin, en lien avec l'utilisation de données personnelles à des fins de communication politique.Cette affaire débute par une plainte déposée par une citoyenn...
L'Autorité de protection des données belge (APD) a publié une décision prononçant un blùme et un avertissement à l'encontre d'une société de location de vélos pour des manquements liés au traitement illicite de données de cartes d'identité, à un défaut de transparence et au non-respect du droit d'ac...
The private, for-profit University of Phoenix is the latest school to disclose that it suffered a data breach due to a vulnerability in Oracle's E-Business Suite.