> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Cybercriminals are increasingly using DNS for data exfiltration, prompting organizations to enhance detection and prevention measures. A critical vulnerability (CVE-2026-108142) in Veeam Backup & Replication 13 has been patched, emphasizing the need for timely updates. Similarly, Microsoft Authenticator's AuthMask vulnerability (CVE-2026-80097) allowed unauthorized access to Microsoft 365 accounts, necessitating user vigilance. Meanwhile, a significant number of data breach victims were affected through third-party vendors, underscoring supply chain risks. Additionally, an offensive AI agent, dubbed "Skynet," has been developed to exploit unprotected AI models, marking a worrying trend in cyberattacks. Lastly, NIST is pushing for a transition to post-quantum cryptography, reflecting the urgency of preparing for future threats.
|
// AI-powered summary generated at 08:00
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique, tracked by Microsoft as “RedFlick”.
The post St...
The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit...
OpenAI has scrapped the planned October release of GPT-6.1 Astra after internal testing found the model did not meet the company’s safety and alignment standards.
GPT-6.1 Astra was being developed as a more autonomous model capable of handling complex tasks with less human...
The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe.
The post RemoteThreat Launches With $7 Million for Offensive Operations Platform appeared first on SecurityWeek.
RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments
Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file
It was discovered that FreeIPMI incorrectly handled certain malformed
Fujitsu SEL long-text responses, leading to a stack-based buffer
overflow. An attacker in control of a malicious IPMI device could
possibly use this issue to cause FreeIPMI to crash, resulting in a denial
of service, or possibly e...
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown.
"During the shutdown, this activity led to the discovery of a previously unknown critical vulnerabi...
The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shutdown, and has no indication it was exploited.
The post Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities appeared first on CyberScoop.
Pentagon personnel agency breach exposed data of 3 million people after attackers accessed a file-sharing server for about nine months. The U.S. Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense, is notifying people that their personal information w...
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates. [...]
AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials
LastPass has announced an expansion of its Business Max offering to include AI Monitoring & Protect and Web Monitoring & Protect, new visibility and governance capabilities that enable organizations to identify and secure the AI tools, SaaS applications, and websites its employees use, all f...
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub.
"The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Secu...
Turns out teaching an AI to keep going can make it rather bad at knowing when to stop
Postman has announced the general availability of Fabric Gateway, a protocol-agnostic control plane for governing how AI agents, LLMs, and MCP servers discover and interact with APIs, tools, and other agents. With Fabric Gateway, organizations can securely connect AI agents to their APIs while centr...
Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries
Starting yesterday, our sensors picked up a small number of scans for "wordfence-waf.php". This particular script is used by Wordfence, a solution to protect WordPress sites. During the Wordfence install, the wordpress-waf.php file will be created in the site&#;x26;#;39;s root directory [1].
Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users. Apple has released security updates for iOS, iPadOS and macOS to fix a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that may have been exploited in att...
Apple says the bug was used to attack "specific targeted individuals" running iOS 26, which the majority of Apple customers are still using.