> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
A suspected ShinyHunters member arrested in Jordan is reportedly cooperating with the FBI, helping investigators track down the group. A suspected member of ShinyHunters, the group that claims to have stolen data on every FBI employee, was picked up in Jordan this week. The man is Saif al-Din Khader...
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going j...
Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. [...]
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Fake Zoom installer hides macOS backdoor CloudSyncD C...
Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs.
Warlock ransomware continues to exploit unpatched SharePoint flaws to breach water utilities, telecoms, governments, and universities worldwide. Warlock ransomware made headlines back in mid-2025 for exploiting a chain of SharePoint zero-days collectively dubbed ToolShell. More than a year later, th...
A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter.
Rey, whose real name is Saif al-Din Khader, is said to have been brought into cu...
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.
The campaigns have impersonated prominent economists and AI...
Pathao, une plateforme de services de covoiturage et de livraison au Bangladesh, a confirmé avoir été victime d'un incident de cybersécurité survenu le 4 octobre 2026. Cet incident a permis à des acteurs malveillants d'obtenir des informations personnelles de certains utilisateurs, notamment leurs n...
Trump Mobile, une société de téléphonie mobile liée à la famille de Donald Trump, a été victime d'une cyberattaque par un groupe de ransomware nouvellement établi, BYOD. Cette attaque a entraîné l'exposition des données personnelles de 3 615 clients, incluant des noms, adresses e-mail, numéros de té...
Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...]
Le district scolaire d'Indiana a signalé un incident de cybersécurité survenu dimanche soir. Le directeur, Robert J. Heinrich Jr., a indiqué qu'à l'heure actuelle, il n'y a aucune indication que les informations des élèves, du personnel ou les données financières gérées par les systèmes du district...
A federal judge ruled that a sheriff’s deputy violated a woman’s Fourth Amendment rights when using Flock to search for her license plate without a warrant.
A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]
By his own admission, David Robinson is “something of a cliché”: an employee at a leading AI company who issues a dire warning while resigning from their job.
Exploitation attempts came from China-hosted IP, VulnCheck researcher says
Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat Labs found CloudSyncD while doing routine scanning on VirusTotal, buried inside a disguised Zoom client. They first spotted it on September 15, cl...
YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.
The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service.
In a "Security Service Espionage Alert" issued on September 30, 2026, MI5 said the "primary purpose...