> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical issues and trends. A Ukrainian ransomware affiliate was sentenced to 70 months in prison for targeting hospitals and businesses, underscoring ongoing ransomware threats. The UK government is considering holding software companies liable for cyber breaches, which could reshape accountability in cybersecurity. Additionally, attackers are increasingly exploiting vulnerabilities in critical infrastructure, notably a 16-year-old UEFI flaw and a newly patched Oracle vulnerability. A significant data breach at Sony's internet provider exposed 2.6 million customer records, while the FBI continues to target "bulletproof" hosting services involved in criminal activities. Lastly, the rise of AI in security operations is prompting both optimism and caution as organizations adapt to new threats, including those involving fake apps that spread malware.
|
// AI-powered summary generated at 16:00
LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough confirmations, LinkedIn adds a verification badge to their profile. Mem...
Données du Club TotalEnergies dérobées chez un prestataire : informations exposées, risques et questions en suspens.
Multiple security issues were discovered in libheif, an ISO/IEC 23008-12 HEIF and AVIF image file format decoder and encoder, which may result in denial of service, the disclosure of sensitive memory contents or, potentially, the execution of arbitrary code if a malformed image file is processed.
Citrix confirme l'exploitation de deux nouvelles failles zero-day critiques dans NetScaler ADC et Gateway. Voici les versions à installer pour se protéger.
Le post « Éteignez vos NetScaler » : Citrix confirme 2 failles zero-day critiques déjà exploitées a été publié sur IT-Connect.
Mail, drive, visio, chat et IA : Octave Klaba confirme l'arrivée d'OVHai Workspace, l'alternative d'OVHcloud à Microsoft 365. Voici ce que l'on sait.
Le post OVHcloud confirme OVHai Workspace, son alternative à Microsoft 365 dopée à l’IA a été publié sur IT-Connect.
Cinquième CTF d’ingénierie sociale au HackFest Québec : mes entraînements, mes objectifs pour 2026 et ma recherche de sponsors.
Sous Proxmox VE, vos interfaces s'appellent nic0, nic1… Voici comment les renommer avec pve-network-interface-pinning sans perdre l'accès au serveur.
Le post Proxmox VE : renommer les interfaces réseau avec pve-network-interface-pinning a été publié sur IT-Connect.
Microsoft suspend la mise à jour KB5002907 : sur des PC équipés d'Office 2016 ou 2019, elle désactive la licence, voire supprime complètement la suite Office.
Le post Microsoft suspend la mise à jour KB5002907 : elle peut désactiver la licence Office a été publié sur IT-Connect.
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]
Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772.
The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek.
Presently sponsored by: If an AI agent caused an incident tomorrow, what evidence could you produce? Origin and analyst firm SACR answer it live Oct 1. Register.How's that view?! With NDC Oslo now done, it's a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott's and...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
The vulnerabilities are listed below -
CVE-2026-88771 (CVSS score:...
A list of topics we covered in the week of September 21 to September 27 of 2026
Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. [...]
Several security issues were fixed in PyJWT.
In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on developer machines and in cloud services. Latimer explains how attackers...
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian...
Maher Azzouzi discovered that LXC did not correctly handle logging
certain failure messages. An attacker could possibly use this issue
to leak sensitive information. This issue only affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2022-47952)...
Requests could be made to crash or run programs as your login if it opened a specially crafted file.