> TODAY'S SUMMARY (37 articles)
Today's cybersecurity landscape highlights a range of significant threats and vulnerabilities. Cisco has launched Project Quarry to develop a tool for detecting AI agents involved in malicious activities. Meanwhile, 123 Reg reported an AI-driven cyberattack on customer data, potentially linked to Chinese attackers. The FBI seized the domain of Virtualine, a bulletproof hosting provider, as part of efforts against criminal hosting services. CISA has confirmed active exploitation of a critical vulnerability in Google’s Brotli library, urging immediate action for updates, particularly for Chrome and Firefox users. Additionally, a breach at Sony-owned So-net exposed over 2.5 million customer records. The rise of AI in cyberattacks is evident, with tools like a Skynet agent exploiting unprotected AI models to launch attacks.
|
// AI-powered summary generated at 12:00
It was discovered that Emacs improperly handled specially crafted SVG
images, resulting in memory corruption. An attacker could possibly use
this issue to cause Emacs to crash, resulting in a denial of service, or
obtain sensitive information.
Jadepuffer, an autonomous AI attacker first identified in July, has expanded into Azure environments, using compromised digital identities to enumerate resources, delete cloud assets and collect other credentials, according to Microsoft.
The activity includes “extensive Azu...
It was discovered that Booth did not properly validate message
authentication codes under certain circumstances. A remote attacker
could possibly use this issue to bypass authentication.
Nearly 400,000 DC Medicaid and Healthcare Alliance beneficiaries may have had personal data exposed through reports published on a public website. The District of Columbia Department of Health Care Finance is notifying nearly 400,000 Medicaid and DC Healthcare Alliance beneficiaries that their perso...
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure. [...]
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface.
Elsewhere, weak service accounts, old bugs, exposed systems...
La fuite Relais Colis refait surface. Le nouveau pirate diffuseur veut punir d'anciens camarades de business !
It was discovered that phpseclib did not perform constant-time padding
validation when using AES in CBC mode. A remote attacker could possibly
use this issue to obtain sensitive information. (CVE-2026-32935)
It was discovered that phpseclib did not use a constant-time comparison
when validating SSH...
The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic intelligence an...
For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The FBI has confirmed unauthorized activity affecting FBIjobs.gov after the ShinyHunters group defaced the website. The group claimed to have stolen...
A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens. That let him pose as...
Fabian Vogt discovered that Plasma Workspace did not properly authenticate
local clients connecting to the session manager. A local attacker could
possibly use this issue to execute arbitrary code as another user.
1 856 digicodes proposés à la vente avec des données immobilières frajçaises. Un risque qui dépasse la seule fuite de données.
It was discovered that dracut created initramfs images with overly
permissive permissions under certain circumstances. A local attacker could
possibly use this issue to obtain sensitive information. This issue only
affected Ubuntu 16.04 LTS. (CVE-2016-8637)
It was discovered that dracut did not pro...
NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents
Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.
It was discovered that the Erlang Port Mapper Daemon did not properly
handle slow connections. A remote attacker could possibly use this issue
to cause a denial of service. (CVE-2026-42792)
It was discovered that Erlang incorrectly handled certain external term
format data, leading to heap corrupti...
Several security issues were fixed in FreeRDP.
Several security issues were fixed in Exim.
With the new experimental support for the Emscripten target in Rust Workers, many previously unsupported Rust libraries and applications can now be built and deployed directly to Cloudflare’s global Workers platform, including upcoming support for Tokio async.