> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Da...
Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.
It was discovered that FreeType had a flaw in its CID font loader. An
attacker could possibly use this issue to cause FreeType to consume
excessive memory and CPU resources, leading to a denial of service.
ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.
It was discovered that FreeRDP contained multiple security issues. An
attacker could possibly use these issues to obtain sensitive information,
cause FreeRDP to crash, resulting in a denial of service, or execute
arbitrary code.
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro.
The attack works only when the program's Java support is enab...
Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified
A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic.
Fortinet’s FortiGuard Labs said it has bee...
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
The post Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks appeared first on SecurityWeek.
Abuse of private firm's access exposed 8.8M records, including those of people who had died or moved abroad
ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach
The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. [...]
Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer.
The post Here’s how experts think CISA should tell agencies to protect OT appeared first on CyberScoop.
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages.
"The unauthorized bot activities included edits to our...
Domino's is warning customers by email that their accounts have been compromised in a credential stuffing attack.
404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours.
The new technology t...
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows.
The ecosystem around it fell short. Earl...
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.
The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.