> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape is marked by several significant threats and trends. A sophisticated North Korean hacking group has used fake employment schemes to execute a record $6.4 billion theft from Binance, highlighting the dangers of social engineering. UK officials have warned of imminent AI-powered ransomware attacks targeting critical infrastructure, predicting a surge in such incidents by 2028. Additionally, enterprises face financial losses of up to $1 million per day from LLMjacking attacks that exploit large language models for unauthorized cloud resource usage. Meanwhile, Google dismantled a massive botnet of 1.3 million Android TV boxes that was involved in ad fraud. Lastly, multiple vulnerabilities have been discovered across various platforms, including critical flaws in Node-RED and Siemens devices, necessitating immediate attention from IT security teams.
|
// AI-powered summary generated at 20:00
Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a research on a campaign against South Korean financial organizations that ran from late September to early October 2026 and ended with...
In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses f...
Mozilla a retiré 16 extensions Firefox clonant Rabby et OKX Wallet pour voler phrases de récupération et clés privées. Voici les détails sur cette campagne.
Le post Ces 16 extensions Firefox malveillantes veulent voler vos cryptos a été publié sur IT-Connect.
The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.
The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek.
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools.
The post Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own appeared first on SecurityWeek.
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon.
To that end, the agencies seized several domains and blocked access to platforms that were u...
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE...
17 610 dépôts GitHub piégés, dont plus de 13 000 réactivés en 34 heures : la campagne FakeGit est de retour pour diffuser le malware SmartLoader.
Le post FakeGit est de retour : 17 610 dépôts GitHub piégés pour diffuser le malware SmartLoader a été publié sur IT-Connect.
A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, VP of Rapid7 Intelligence, explains why its operators go after mail gateways and other edg...
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. [...]
Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The systems range from login screens to a turbine control page that offers a Stop but...
The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, the document addresses governance...
Brenden Cuni, an ICE supervisor, has been accused of excessive force and tackling a pregnant woman to the ground. Several of his arrests were later found to be unlawful in federal court.
Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say their own organization hesitates to let AI make an operational decision without a hum...
Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted.
The post Formula Predicts When AI Chatbots Are at Risk of Turning Bad appeared first on SecurityWeek.
Summary The UK’s latest sanctions target the broader infrastructure supporting Russia’s wartime economy. The UK designated crypto payment processors Cryptomus…
The post UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions appeared first on Chainalysis.
Gear Review: XTEINK X4 Pro
Un incident de cybersécurité a perturbé la production et la distribution des avis des tribunaux de faillite fédéraux américains à l'échelle nationale. L'incident, qui a débuté le 9 octobre, a retardé les communications aux créanciers et affecté les avis électroniques et papier. Le centre de notifica...