> TODAY'S SUMMARY (3 articles)
Today's cybersecurity news highlights significant threats involving GitHub and AI. Attackers compromised 42 GitHub repositories by utilizing payloads too large for standard search mechanisms, indicating a trend in exploiting file size limitations to evade detection. Additionally, a new offensive AI agent dubbed 'Skynet' has emerged, capable of hijacking exposed AI models online to facilitate cyberattacks. This development underscores the growing intersection of AI and cybercrime, raising concerns about the security of machine learning systems. Organizations must enhance their defenses against such evolving threats.
|
// AI-powered summary generated at 04:00
Signal users who switch from an Android phone to an iPhone, or the other way around, can take their message history with them, and backups can be restored on Android, iOS, Linux, macOS and Windows. The option is part of a set of backup updates the company finished rolling out with Signal for iOS ver...
Threat actors abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT. ChatGPT’s Custom GPT feature is the latest legitimate surface being turned into a delivery mechanism, and Huntress researchers caught it in action across at least 40 incidents. A Custom GPT (now simply called a...
Un pirate informatique français diffuse plus de 15 000 lignes présentées comme liées à des clients SFR.
AI containment is essential, but security leaders should assume every boundary can fail once an agent can communicate, use tools, and act on real systems.
On September 17, podcaster Steven Bartlett asked four AI experts an unusual question: Could you build a jail for a...
FFRandonnée : un pirate revendique 1,43 million de fiches, avec courriels, téléphones et données de licence.
Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine
Une ferme de cryptomonnaies saisie ! Des dizaines de machines connectées à un barrage hydroélectrique.
British Transport Police’s six-month facial recognition pilot produced one alert, and it was a false positive
Insight Global’s John Dickson had a problem familiar to many CISOs today.
Employees were embracing AI tools faster than his security team could track them, and new AI agents and service integrations spread rapidly across the environment alongside them. Dickson and his secur...
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe.
The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network file system (NFS) server daemon;
- OCFS2 file system;
- IPv6 networking;
- Netfilter;
- SCTP protoco...
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes.
DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash c...
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added an Apple Multiple Products flaw, tracked as CVE-2026-86950 (CVSS score of 8.8), to its...
Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep pace
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network file system (NFS) server daemon;
- IPv6 networking;
- Netfilter;
(CVE-2025-38724, CVE-2026-53131, CVE-20...
A security issue was discovered in the Linux kernel.
An attacker could possibly use this to compromise the system.
This update corrects flaws in the following subsystems:
- IPv6 networking;
- Netfilter;
Two men who ran BEC and phishing campaigns against US businesses while serving in the Air Force have been sentenced to a combined 189 months in federal prison. According to public documents and evidence presented at sentencing, Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, both from Delawar...
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...