> TODAY'S SUMMARY (4 articles)
Today's cybersecurity landscape highlights significant threats from AI, which can now autonomously execute complex attacks on critical infrastructure, raising concerns about preparedness. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities catalog, adding several high-risk software flaws, including those in ProFTPD and ONLYOFFICE Docs, emphasizing the need for immediate patching. Additionally, the ongoing FortiBleed vulnerability remains active, threatening organizations that have not yet implemented fixes. The broader implications of AI in cybersecurity are also being examined, particularly in relation to governance and compliance issues. Overall, organizations must remain vigilant and proactive in addressing these emerging threats and vulnerabilities.
|
// AI-powered summary generated at 12:01
Law enforcement agencies in the United States and France have seized control of domains linked to the notorious BreachForums hacking forum, commonly used for the leaking of stolen data, and the sale of hacked credentials.
Read more in my article on the Hot for Security blog.
What developers using artificial intelligence (AI) assistants and vibe coding need to protect against.
News of the reassignments comes at a time when the U.S. is facing a wave of hacks targeting private industry and the federal government.
Counter Threat Unit™ (CTU) researchers are investigating multiple incidents in an ongoing campaign targeting users of the WhatsApp messaging platform. The campaign, which started on September 29, 2025, is focused on Brazil and seeks to trick users into executing a malicious file attached to a self-s...
The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected devices at U.S. pro...
The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn Widely known time-related software bugs that could cause significant disruptions when triggered in more than a decade are actually exploitable by hackers today, researchers warn. One of the bugs, known as ‘The Year 2038 pro...
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker.
Teens arrested for doxing children, Crimson Collective steals cloud data to extort victims, 5.5M Discord accounts face public leak threat.
The more sensitive data that companies have to collect and store, the greater the consequences for users if it’s breached.
It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it.
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application (SEA) feature as a way to distribute its payloads.
According to Fortinet FortiGuard Labs, select iterations have also employed the open-source Elect...
Forescout's phony water plant fooled TwoNet into claiming a fake cyber victory – then it quietly shut up shop Security researchers say they duped pro-Russia cybercriminals into targeting a fake critical infrastructure organization, which the crew later claimed - via their Telegram group - to be a re...
A threat actor known as Storm-2657 has been observed hijacking employee accounts with the end goal of diverting salary payments to attacker-controlled accounts.
"Storm-2657 is actively targeting a range of U.S.-based organizations, particularly employees in sectors like higher education, to gain acc...
Crooks phish campus staff, slip into HR systems, and quietly reroute paychecks Microsoft's Threat Intelligence team has sounded the alarm over a new financially-motivated cybercrime spree that is raiding US university payroll systems.…
Following the Money is a Q&A series that spotlights how Chainalysis customers use our products in the real world —…
The post Following the Money with Chainalysis: 7 Questions for Prashant Kalia appeared first on Chainalysis.
(See how I cleverly did not mention AI in the title!) You know we have seen more than our fair share of slop reports sent to the curl project so it seems only fair that I also write something about the state of AI when we get to enjoy some positive aspects of this technology. … Continue reading A ne...
Fortra on Thursday revealed the results of its investigation into CVE-2025-10035, a critical security flaw in GoAnywhere Managed File Transfer (MFT) that's assessed to have come under active exploitation since at least September 11, 2025.
The company said it began its investigation on September 11 f...
Two AI "girlfriend" apps have blabbed millions of intimate conversations from more than 400,000 users.
Google has introduced a new AI Vulnerability Reward Program offering up to $30,000 for bug discoveries in its AI products
AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber operation, and hack autonomously, at computer speeds and scale. This is going to change everything.
Over the summer, hacker...