> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
PowerShell script locked thousands of workers out of their accounts An Ohio IT contractor has pleaded guilty to breaking into his former employer's systems and causing nearly $1 million worth of damage after being fired.âŠ
What Flock's ALPR cameras really collect, how theyâre used in neighborhoods, and what you can do to stay in control.
Potential Government Coercion Raises First Amendment ConcernsSAN FRANCISCO â The Electronic Frontier Foundation (EFF) sued the departments of Justice (DOJ) and Homeland Security (DHS) today to uncover information about the federal government demanding that tech companies remove apps that document im...
In a court filing ahead of the ruling, NSO told the judge that blocking it from targeting WhatsApp infrastructure to implant its spyware could âput NSOâs entire enterprise at riskâ and âforce NSO out of business.â
It was discovered that cups-filters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu...
Networking vendor claims rival helped portray it as a national-security risk in the US TP-Link is suing rival networking vendor Netgear, alleging that the rival and its CEO carried out a smear campaign by falsely suggesting, it says, that the biz had been infiltrated by the Chinese government.âŠ
A multi-year ATM fraud campaign by UNC2891 targeted two Indonesian banks, cloning cards, recruiting money mules and coordinating cash withdrawals
SESSION
Session 3C: Mobile Security
-----------
-----------
Authors, Creators & Presenters: Chang Yue (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China), Kai Chen (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China), Zhixiu Guo (Ins...
American cybersecurity company SonicWall urged customers today to patch a high-severity SonicOS SSLVPN security flaw that can allow attackers to crash vulnerable firewalls. [...]
It was discovered that libcupsfilters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
libcupsfilters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-57812)
It was discovered that libcupsfilters incorre...
IntroductionIn May 2025, Zscaler ThreatLabz discovered CVE-2025-50165, a critical remote code execution (RCE) vulnerability with a CVSS score of 9.8 that impacts the Windows Graphics Component. The vulnerability lies within windowscodecs.dll, and any application that uses this library as a dependenc...
The Android malware is in development and appears to be mainly aimed at users in Europe.
The post New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages appeared first on SecurityWeek.
There is a serious security problem inside Comet, the AI-powered agentic browser made by Perplexity, SquareX researchers say: Cometâs MCP API allows the browserâs built-in (but hidden from the user) extensions to issue commands directly to a userâs device, and the capability can be leveraged by atta...
D-Link is warning of three remotely exploitable command execution vulnerabilities that affect all models and hardware revisions of its DIR-878 router, which has reached end-of-service but is still available in several markets. [...]
The Prosecutor Generalâs Office accused the gameâs developer, GSC Game World, of financing Ukraineâs armed forces â alleging it transferred about $17 million to the military in 2022.
The pair had pleaded guilty in late July to participating in a conspiracy âto operate a money transmitting business in which they knowingly transmitted criminal proceeds.â
Windows 11 migration is inevitable as Windows 10 support ends, and unsupported systems create major security and ransomware risks. Acronis explains how to use this migration to review backups, strengthen cybersecurity, and ensure data stays recoverable. [...]
CISA launches guide to combat cybercrime via bulletproof hosting, recommending measures for ISPs
From secure service mesh rollouts to AI cluster hardening, see how KubeCon + CloudNativeCon NA 2025 redefined identity, trust, and governance in Kubernetes environments.
The post Trust Beyond Containers: Identity and Agent Security Lessons from KubeConâŻ2025 appeared first on Security Boulevard.
Oligo Security announced new capabilities to protect the broadest spectrum of AI deployments, including AI applications, LLMs, and agentic AI. The new platform modules address the largest blind spot in AI security by securing production AI technologies that remain largely ungoverned, unmonitored, an...