> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own private, secure networks, communicate with no servers in the middle, and get started with no personal information required. The platform gives agents an environme...
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page for Google’s OSS VRP states that...
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety veteran David Robinson knows how his resignation looks. He starts his essay by calling himself “something of a cliché”: an AI company employee who q...
L'application Word de Microsoft 365 Apps enregistrait certains PDF destinés à SharePoint Online dans un dossier local au lieu du Cloud. Attention à vos données.
Le post Word : un bug envoyait les PDF destinés à SharePoint dans un dossier de cache en local a été publié sur IT-Connect.
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
The post Alleged ShinyHunters Leader Arrested in Jordan appeared first on SecurityWeek.
A list of topics we covered in the week of September 28 to October 4 of 2026
A list of topics we covered in the week of September 28 to October 4 of 2026
Le compte X de Microsoft (13 millions d'abonnés) a été piraté pour promouvoir un token crypto Clippy. Microsoft confirme l'accès non autorisé et enquête.
Le post Le compte X officiel de Microsoft piraté pour promouvoir un token crypto à l’effigie de Clippy a été publié sur IT-Connect.
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks.
The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0.
"CVE-2026-88779 is a memory over...
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers how Cylerity keeps PHI away from its bank partner, why AI models re...
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek.
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of config files and source code. It ships as one binary and, in its core...
Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how often it sees them and how much damage each can do, and RMM abuse sit...
For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the da...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Koike Sanso Kogyō a annoncé avoir été victime d'une cyberattaque, découverte le 5 octobre. L'incident a entraîné des dysfonctionnements dans certains systèmes et des perturbations opérationnelles. Des fichiers électroniques soupçonnés d'avoir été exfiltrés, incluant des informations personnelles, on...
Le groupe de ransomware The Gentlemen a ciblé l'unité Mandurah State Emergency Service (Mandurah SES) en Australie. L'incident a été signalé le 5 octobre 2026 par les autorités de cybersécurité de l'État de Western Australia (WASOC), suite à un accès non autorisé à l'un de ses serveurs. Le serveur a...