> TODAY'S SUMMARY (47 articles)
Today's cybersecurity landscape highlights a growing concern over AI-driven threats. The UK's National Cyber Security Centre (NCSC) warns that AI-powered attacks, particularly in ransomware, could target critical infrastructure by 2028, as legacy systems remain vulnerable. Meanwhile, a significant breach at Revolve has compromised the card details of up to 1.5 million customers, and a data breach at Harvard University has exposed 851,000 accounts. On the botnet front, Google has dismantled the XCPE botnet, which leveraged over 1.3 million devices for malicious activities. Additionally, ongoing exploitation of critical vulnerabilities, such as those in Siemens IoT devices and CryptoPayment Gateway plugins, underscores the urgent need for robust cybersecurity measures. The prevalence of AI in both attacks and defenses continues to shape the threat landscape, necessitating immediate action from organizations.
|
// AI-powered summary generated at 12:00
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "government affiliated" servers.
General Motors agreed to pay $220 million to settle a lawsuit filed by a coalition of 36 state attorneys general who alleged the company unlawfully sold information about driver behavior to outside parties.
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices.
The vulnerability, tracked as CVE-2026-76418 and rat...
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets. [...]
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelli...
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't.
There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from famili...
Snoops 'likely still' have access to US government-affiliated network
Multiple security issues were discovered in GitPython, a Python library to interact with Git repositories, which could result in information disclosure, directory traversal, execution of arbitrary code or denial of service. For the stable distribution (trixie), these problems have been fixed in
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.15-0+deb13u1.
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud storage buckets in October 2026, holding 18.05 billion files. They built the count from the search engines t...
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. For the stable distribution (t...
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...]
La Commission de protection des informations personnelles (PIPC) sud-coréenne a publié les résultats d'un examen préventif sur le traitement des données personnelles par les centres de contact client, émettant des recommandations pour renforcer la protection des informations.Cet examen a été initié...
La Commission pour la protection des informations personnelles (PIPC) de Corée du Sud et le ministère de l'Intérieur et de la Sécurité ont organisé un forum public pour débattre de la protection et de l'utilisation des données personnelles à l'ère de l'intelligence artificielle (IA).Ce troisième "Fo...
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work.
L'autorité finlandaise de protection des données alerte sur une augmentation des violations de données visant les sites de commerce en ligne et les comptes Microsoft 365.L'autorité a constaté une hausse des notifications de violations de données ciblant les commerces en ligne, où des informations de...
L'Autorité néerlandaise de protection des données (AP) a publié des recommandations à destination des agences de recouvrement concernant l'utilisation responsable de l'intelligence artificielle (IA) et des algorithmes.Suite à une enquête menée auprès de 29 agences, l'AP a constaté un usage croissant...
It was discovered that the .NET Blazor WebAssembly debug proxy did not
properly escape certain values. An attacker could possibly use this issue
to execute arbitrary code. The fix for this CVE was originally released via
USN-8942-1, but it was found to be incomplete. This issue only affected
dotnet1...
Le Bureau du Commissaire à l'information (ICO) a réagi à une évaluation de l'Office des communications (Ofcom) concernant les dispositifs de vérification de l'âge en ligne.L'autorité britannique salue l'évaluation rapide par l'Ofcom de la "vérification de l'âge hautement efficace" pour le seuil de 1...
L'autorité italienne de protection des données (GPDP) a publié une décision à l'encontre du Ministère de la Justice pour des manquements liés à la publication des résultats des épreuves écrites d'un concours de notaires.Faits et contexteL'affaire a débuté suite à des articles de presse concernant la...