> TODAY'S SUMMARY (6 articles)
Todayâs cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote accessâan indication of increasing risks to network security. Meanwhile, Microsoftâs email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
There are no tricks in EFF's EFFector newsletter, just treats to keep you up-to-date on the latest in the fight for digital privacy and free expression.Â
In our latest issue, we're explaining a new lawsuit to stop the U.S. government's viewpoint-based surveillance of online speech; sharing even more...
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
For the past few years, the term âAI in cybersecurityâ has been mostly marketing fluff. Weâve all sat through vendor presentations promising a magical AI black box that solves everything, only to find itâs just a fancier pattern matching engine. So, when HPE finalized its acquisition of Juniper Net...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âSkateboardââ appeared first on Security Boulevard.
Microsoft is investigating an ongoing DNS outage affecting customers worldwide, preventing them from logging into company networks and accessing Microsoft Azure and Microsoft 365 services. [...]
Phishing began as a clumsy trick â a fake email, a misspelled domain, and a few unlucky victims. Phishing-as-a-service changedâŠ
The post Chainalysis in Action: Reactor Powers Microsoftâs First Civil Action against RaccoonO365 appeared first on Chainalysis.
The attack, which is the second time the group has hit Russiaâs agro industrial firms in recent months, coincided with preparations for the Russian agriculture forum scheduled for the end of the month in Moscow.
ZEST Security announced its free remediation risk assessment. The industry is overflowing with tools to identify vulnerabilities, but these tools all fail to provide context that has real operational impact. ZEST is bridging that gap by offering curated remediation pathways for security teams to add...
An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials. [...]
Following scrutiny over the safety of the technology for kids and teenagers, Character.AI on Wednesday said that as of next month people under 18 will not be able to use its chatbots.
Ransomware profits drop as victims stop paying hackers The number of victims paying ransomware threat actors has reached a new low, with just 23% of the breached companies giving in to attackersâ demands. With some exceptions, the decline in payment resolution rates continues the trend that Covewar...
The Big Four bizâs big fat fail exposed a boatload of secrets online A Dutch cybersecurity outfit says its lead researcher recently stumbled upon a 4TB+ SQL Server backup file belonging to EY exposed to the web, effectively leaking the accounting and consulting megacorp's secrets.âŠ
OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come in two sizes: gpt-oss-safeguard-120b and gpt-oss-safeguard-20b. Both are fine-tuned versions of the gpt-oss open models and available under the Apache 2.0 lic...
Google Chrome will enhance security with enforced HTTPS connections from version 154, set for release in October 2026
It was discovered that GNU binutils incorrectly handled certain files.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. The attack is restricted to local execution.
(CVE-2025-11082)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attac...
An Irish human rights group submitted a formal complaint to the European Commission alleging that Irelandâs appointment of a former Meta lobbyist to its Data Protection Commission is illegal.
The Wordfence Threat Intelligence Team recently discovered a sophisticated malware campaign targeting WordPress e-commerce sites, specifically those using the WooCommerce plugin. This malware exhibits advanced features including custom encryption methods, fake images used to conceal malicious payloa...
Bringing frictionless implementation [Progressive Segmentationâą and EDR integration] and rapid value realization to an award-winning and peer-recognized technology platform demystifies, simplifies, and makes it extremely easy for our customers to achieve cyber resilience. As a student of innovation...
Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and cloud gateways by various botnets such as Mirai, Gafgyt, and Mozi.
"These automated campaigns exploit known CVE vulnerabilities and cloud misconfigurations to gain control over exp...
Securing your firewall is much easier with the new Health Check feature.