> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Ivanti has issued an urgent patch for a zero-day vulnerability in its Connect Secure remote access gateway that is actively being exploited. Additionally, Docker disclosed a severe flaw in Docker Hub that allowed attackers to impersonate users and tamper with container images. GitLab patched a maximum-severity vulnerability allowing unauthenticated code execution on its servers. Multiple vulnerabilities in the Linux kernel were also reported, posing risks for local attackers to compromise systems. In broader trends, North Korean hackers are reportedly targeting Ukrainian experts for intelligence, while small AI models are raising concerns about potential self-replication across IoT devices. Finally, a significant cyberattack on French supermarkets caused widespread food spoilage by hijacking refrigeration systems.
|
// AI-powered summary generated at 16:00
CVE-2025-59287 is a critical RCE vulnerability identified in Microsoftâs WSUS. Our observations from cases show a consistent methodology.
The post Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild appeared first on Unit 42.
X is warning that users must re-enroll their security keys or passkeys for two-factor authentication (2FA) before November 10 or they will be locked out of their accounts until they do so. [...]
On October 22, 2025, the Multilateral Sanctions and Measures Team (MSMT) released its comprehensive âReport Covering DPRK Cyber and ITâŠ
The post Five Key Takeaways from MSMTâs Report on North Korean Cyber Operations appeared first on Chainalysis.
The number of victims paying ransomware threat actors has reached a new low, with just 23% of the breached companies giving in to attackers' demands. [...]
The utility responsible for operating Sweden's power grid is investigating a data breach after a ransomware group threatened to leak hundreds of gigabytes of purportedly stolen internal data.
Radare2 could be made to crash if it received specially crafted input.
Session 1A: WiFi and Bluetooth Security
Authors, Creators & Presenters: Ziqiang Wang (Southeast University), Xuewei Feng (Tsinghua University), Qi Li (Tsinghua University), Kun Sun (George Mason University), Yuxiang Yang (Tsinghua University), Mengyuan Li (University of Toronto), Ganqiu Du (Chin...
Microsoft has started testing a new feature that prompts Windows 11 users to run a memory scan when logging in after a blue screen of death (BSOD). [...]
Ex-CISA head thinks AI might fix code so fast we wonât need security teams Ex-CISA head Jen Easterly claims AI could spell the end of the cybersecurity industry, as the sloppy software and vulnerabilities that criminals rely on will be tracked down faster than ever. Speaking at AuditBoardâs user con...
strongSwan client could be made to crash or run programs if it received specially crafted network traffic.
ATOS a remportĂ© un marchĂ© stratĂ©gique dâune valeur maximale de 326 millions dâeuros auprĂšs de la Commission europĂ©enne pour assurer des services dâexploitation technique en cybersĂ©curitĂ©....
The Dante spyware from Memento Labs â the successor to the notorious Italian company Hacking Team â was part of espionage operations against targets in Russia and Belarus, researchers at Kaspersky said.
The move by cities to halt their work with Flock follows reports that the company shared data from local partners with federal immigration authorities.
Kaspersky researchers said Memento Labs appears to be behind both the Operation ForumTroll malware and spyware, known as Dante.
The post Hacking Team successor linked to malware campaign, new âDanteâ commercial spyware appeared first on CyberScoop.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD ââWindow Screenâ appeared first on Security Boulevard.
QNAP warned customers to patch a critical ASP.NET Core vulnerability that also impacts the company's NetBak PC Agent, a Windows utility for backing& up data to a QNAP network-attached storage (NAS) device. [...]
Du 22 au 24 octobre, SophosAI a présenté au CAMLIS 2025 des recherches sur le "LLM Salting" (une nouvelle défense contre les jailbreaks) et la classification des lignes de commande.
Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics
A zero-day vulnerability in Google Chrome exploited in Operation ForumTroll earlier this year delivered malware linked to Italian spyware vendor Memento Labs, born after IntheCyber ââGroup acquired the infamous Hacking Team. [...]
Ravin Academy confirms the intrusion on Telegram, says investigation continues Iran's school for state-sponsored cyberattackers admits it suffered a breach exposing the names and other personal information of its associates and students.âŠ