> TODAY'S SUMMARY (37 articles)
Today's cybersecurity landscape highlights a range of significant threats and vulnerabilities. Cisco has launched Project Quarry to develop a tool for detecting AI agents involved in malicious activities. Meanwhile, 123 Reg reported an AI-driven cyberattack on customer data, potentially linked to Chinese attackers. The FBI seized the domain of Virtualine, a bulletproof hosting provider, as part of efforts against criminal hosting services. CISA has confirmed active exploitation of a critical vulnerability in Google’s Brotli library, urging immediate action for updates, particularly for Chrome and Firefox users. Additionally, a breach at Sony-owned So-net exposed over 2.5 million customer records. The rise of AI in cyberattacks is evident, with tools like a Skynet agent exploiting unprotected AI models to launch attacks.
|
// AI-powered summary generated at 12:00
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...]
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]
The San Francisco Police Department (SFPD) began regularly deploying drones two years ago and has since expanded their use in a way that has outpaced its documented policy and evaded existing local and state oversight of these devices.Â
The department has a new proposed policy, which continues to be...
Smells like more agentic ransomware, Redmond warns
USN-8487-1 fixed vulnerabilities in curl. Unfortunately that update
contained an incomplete fix for CVE-2026-8927. This update fixes the
problem.
Original advisory details:
Andrew Nesbitt discovered that curl could reuse an existing live
connection during STARTTLS-based connection upgrades even...
Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar analyzed stealer log data from the last 90 days and found 482 companies with exposed AI accounts and credentials. Of those, 295 appeared in activ...
Michał Majchrowicz and Marcin Wyczechowski discovered that libevent
incorrectly handled certain DNS responses. A remote attacker could possibly
use this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-63387)
It was discovered that libevent incorrectly handled certain connect...
Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]
A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs site.
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks.
The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to...
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]
Multiple vulnerabilities have been discovered in the Dovecot IMAP server which could result in denial of service, SMTP smuggling, information disclosure, code injection via malformed Sieve scripts or bypass of ACL restrictions. For the stable distribution (trixie), these problems have been fixed in
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code execution. For the stable distribution (trixie), these problems have been fixed in version 6.8.10+dfsg1-0+deb13u1.
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis.
The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits,...
One expert told CyberScoop that the announcement reflects industry recognition that after years of training models to behave safely or ethically, more outside controls are needed.
The post As AI world debates security, NVIDIA releases open source tools for agents appeared first on CyberScoop.
What is IAM for AI agents?
AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how t...
Multiple security vulnerabilities were discovered in Flatpak, an application deployment framework for desktop apps, which could result in denial service via malicious applications or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 1.16.6-1~deb1...
Un chercheur de 16 ans a obtenu un accès admin à Titan, un service d'analyse interne de Microsoft, grâce à une faille liée à un jeton JWT non signé.
Le post Faille Microsoft : un jeton JWT non signé donnait un accès admin à 17 300 milliards de lignes a été publié sur IT-Connect.
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday.
The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, us...
RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs...