> TODAY'S SUMMARY (37 articles)
Today's cybersecurity landscape highlights a range of significant threats and vulnerabilities. Cisco has launched Project Quarry to develop a tool for detecting AI agents involved in malicious activities. Meanwhile, 123 Reg reported an AI-driven cyberattack on customer data, potentially linked to Chinese attackers. The FBI seized the domain of Virtualine, a bulletproof hosting provider, as part of efforts against criminal hosting services. CISA has confirmed active exploitation of a critical vulnerability in Google’s Brotli library, urging immediate action for updates, particularly for Chrome and Firefox users. Additionally, a breach at Sony-owned So-net exposed over 2.5 million customer records. The rise of AI in cyberattacks is evident, with tools like a Skynet agent exploiting unprotected AI models to launch attacks.
|
// AI-powered summary generated at 12:00
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Plus de 2 000 connecteurs et plugins, des agents IA et des intégrateurs réunis au même endroit : Anthropic lance la Claude Marketplace. Pour qui ? Pourquoi ?
Le post Claude Marketplace : Anthropic réunit plus de 2 000 connecteurs et plugins au même endroit a été publié sur IT-Connect.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Several security issues were fixed in libvirt.
Several security issues were fixed in libvirt.
A former soldier in the U.S. Army was sentenced to more than five years in federal prison after pleading guilty to hacking into several telecommunications companies and leaking sensitive records.
Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers.
The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek.
Active-duty campaign targeted at least ten organizations and sought $1 million in ransom payments
It was discovered that FreeRDP contained multiple security issues. An
attacker could possibly use these issues to obtain sensitive information,
cause FreeRDP to crash, resulting in a denial of service, or execute
arbitrary code.
Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s visits to popular websites in Firefox, and every site it flagged...
It was discovered that Exim had an out-of-bounds write when
Proxy-Protocol was used with an attacker-controlled proxy. A remote
attacker could possibly use this issue to execute arbitrary code.
(CVE-2026-94054)
It was discovered that Exim had a use-after-free when certain
non-default TLS settings w...
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users.
According to Okta’s Global CISO Insights 2026 report, only 47% of CIS...
It was discovered that libvirt did not properly validate newline characters
in DNS TXT record values and SRV record attributes in its virtual network
driver. A local attacker with permission to define virtual networks could
possibly use this issue to inject arbitrary dnsmasq configuration
directives...
It was discovered that libvirt had an integer overflow vulnerability in
the NodeGetFreePages RPC handler. A local attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-18917)
It was discovered that libvirt did not correctly handle symbolic links
wh...
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent.
"The implant installs the framework unchanged, then overwrites its SOUL.md per...
NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that controls what an agent can access, and Sentry, a watchdog in the...
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.