> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
New curl packages are available for Slackware 15.0 and -current to fix security issues.
Der Ransomware-Dienst Ransomhouse nutzt jetzt eine komplexe Dual-Schlüssel-Verschlüsselung und automatisierte Angriffe auf VMware ESXi.Suttipun – shutterstock.com
Sicherheitsexperten haben kĂĽrzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomwar...
libcaca could be made to crash if it opened a specially crafted file.
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.
The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek.
À l'occasion du CES 2026, BLUETTI a dévoilé le Charger 2, un appareil qui marque un tournant pour la recharge mobile. Il est présenté par la marque comme le premier hub intelligent capable de se recharger à l'aide de l'énergie de la voiture et du solaire, sans choisir entre l'un ou l'autre. Voici ce...
Cybercriminals are increasingly using AI to lower the barrier to entry for fraud and hacking, shifting from skill-based to AI-assisted attacks known as "vibe hacking." Flare examines how underground forums promote AI tools, jailbreak techniques, and so-called "Hacking-GPT" services that promise ease...
Attackers exploit misconfigured email routing to spoof internal emails, using PhaaS platforms like Tycoon2FA to steal credentials. Attackers exploit misconfigured email routing and spoof protections to send phishing emails appearing internal, using PhaaS platforms like Tycoon2FA to steal credentials...
Read the latest DFIR news – new Threema parsing in iLEAPP, Oxygen Forensic KeyScout in action, a beginner-friendly malware sample hub, and more.
The more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing num...
Libxslt could be made to crash or exhibit undefined behavior if it opened a specially crafted file.
Information published.
Information published.
File-sharing platform ownCloud warned users today to enable multi-factor authentication (MFA) to block attackers using compromised credentials from stealing their data. [...]
Information published.
Information published.
Bryan Fleming, who founded the stalkerware business pcTattletale, pleaded guilty in federal court to hacking and conspiracy charges. Investigators said he crossed the line when he started marketing the software to people who wanted to covertly plant it on the smartphones of unsuspecting victims to...
Information published.
Information published.
Taiwan recorded an average of 2.63 million cyber intrusion attempts to it critical infrastructure per day coming from China in 2025
Information published.