> TODAY'S SUMMARY (98 articles)
Today's cybersecurity news highlights several critical threats and trends. Z.ai faced backlash for security flaws in its ZCode coding assistant, prompting the temporary disabling of certain features. In the UK, two individuals were arrested following the disruption of the "EvilTokens" AI chatbot, which facilitated cybercriminals in account compromise for a subscription fee. Researchers revealed that stolen passwords pose significant risks to U.S. water providers, exposing critical infrastructure to potential cyberattacks. Additionally, a wave of AI-driven threats is emerging, with reports indicating that AI is increasingly aiding cybercriminals while defenders struggle to keep pace. Lastly, vulnerabilities in Zyxel switches and recent attacks exploiting deepfake technology underscore the evolving landscape of cybersecurity risks.
|
// AI-powered summary generated at 16:01
Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators.
The vulnerabilities, as disclosed by Patchstack, are li...
AI infrastructure, including advanced semiconductors mostly made in Taiwan, has become a key point of competition between the U.S. and China.
The post Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff appeared first on SecurityWeek.
For nearly a decade, Equifax has been dealing with the aftermath of one of the worst cybersecurity breaches in US history, racking up $1.4 billion on cleanup costs.
Among the mistakes that led to the breach were a mismanaged patching process, an expired public-key certifica...
Scammers use fake TikTok login pages, warnings, and verification offers to trick you into handing over your account details.
The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers.
The post CISA Warns of Exploited Oracle WebLogic Vulnerability appeared first on SecurityWeek.
WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up report on the WeedHack Malware-as-a-Service campaign this week, documenting ten active malicious sites and multiple file-host...
Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I also tested the passkey implementation and noticed some unusual behavior. During the debugging process, I created two short JavaScript helper functions...
NIS 2 oblige-t-il le MFA pour la connexion Windows ? DĂ©couvrez les exigences et une approche non invasive via Specops Secure Access pour ajouter du MFA Ă l'AD.
Le post NIS 2 : pourquoi la connexion à Windows reste l’angle mort de vos accès a été publié sur IT-Connect.
Microsoft confirme que les mises à jour .NET Framework d'août 2026 cassent l'impression et l'export PDF des applications WPF. Une solution temporaire existe.
Le post Impression et export PDF cassés sur Windows : les mises à jour .NET d’août 2026 en cause a été publié sur IT-Connect.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2...
In this Help Net Security interview, Dr. Jaushin Lee, CEO of Zentera Systems, discusses where AI supply chain risk shows up. He says most incidents still hit developer workflows and open-source package repositories, while poisoned model weights and compromised MCP servers stay mostly in research dem...
Microsoft renforce la signature de code de Windows : nouvelle autorité en octobre 2026, RSA-3072 et SHA-384 fin 2026, puis post-quantique par défaut en 2027.
Le post Windows : la signature de code passe au post-quantique, vos applis sont-elles prêtes ? a été publié sur IT-Connect.
Truffle Security announced TruffleHog AWS Analyze, a new addition to TruffleHog Enterprise. TruffleHog AWS Analyze enriches found AWS credentials to highlight permissions and access levels, so a security team can assess the risk and prioritize its response. TruffleHog Enterprise already finds and ve...
HOL Guard is a free, open-source tool that sits between an AI assistant and the computer it runs on. When the assistant tries something risky, the tool pauses it and asks you first. It installs in about a minute, runs on your own machine, and a typical check takes under 50 milliseconds. Your files a...
Le CERT/CC a révélé la CVE-2026-19874, une faille de Metal Gear Online 3 qui permettait à l'hôte d'un lobby Steam d'exécuter du code sur le PC des joueurs.
Le post Metal Gear Online 3 : rejoindre un salon Steam suffisait à faire exécuter du code sur votre PC a été publié sur IT-Connect.
In this Help Net Security video, Chris Nyhuis, CEO at Vigilant, explains why the picture of a lone ransomware attacker is about 15 years out of date. He walks through the cybercrime supply chain and the five businesses inside it: harvesters who run infostealer malware, brokers who verify and resell...
Debian advises users to upgrade erlang packages due to multiple vulnerabilities that could lead to denial of service, information disclosure, and code execution, affecting various components.
The Trusted Computing Group has published requirements that spell out what a Trusted Platform Module has to do before anyone calls it quantum-safe. A TPM is the chip that holds a machine’s keys and records measurements of its firmware, so the platform can later prove it has not been altered. Buyers...
Specialist Compliance Security AT&T | USA | On-site – View job details As a Specialist Compliance Security, you will serve as AT&T’s liaison for law enforcement, first responders, and emergency personnel nationwide. Respond 24×7 to emergency requests, process subpoenas, warrants, and court o...