> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical issues and trends. A Ukrainian ransomware affiliate was sentenced to 70 months in prison for targeting hospitals and businesses, underscoring ongoing ransomware threats. The UK government is considering holding software companies liable for cyber breaches, which could reshape accountability in cybersecurity. Additionally, attackers are increasingly exploiting vulnerabilities in critical infrastructure, notably a 16-year-old UEFI flaw and a newly patched Oracle vulnerability. A significant data breach at Sony's internet provider exposed 2.6 million customer records, while the FBI continues to target "bulletproof" hosting services involved in criminal activities. Lastly, the rise of AI in security operations is prompting both optimism and caution as organizations adapt to new threats, including those involving fake apps that spread malware.
|
// AI-powered summary generated at 16:00
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. [...]
In an era of increasingly sophisticated AI-fueled scams, a retro threat may be lurking in your mailbox.
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
The post New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining appeared first on SecurityWeek.
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally.
The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could resul...
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discus...
OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and evaluation.”
The post OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure appeared first on SecurityWeek.
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site.
The cross-site request forgery (CSRF) vulnerability, which has yet to...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerabilities in question are as follows -...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress Core flaw, tracked as CVE-2026-87902 (CVSS score of 9.2), to its Known Exploited Vulnera...
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack.
"Kiteworks received credible threat intelligence from federal intelligence authorities indic...
Microsoft va déprécier le rôle WDS dès la prochaine version de Windows Server. Périmètre, calendrier et alternatives : voici ce que les admins doivent savoir.
Le post Après MDT, Microsoft lâche WDS : le rôle sera déprécié dans le prochain Windows Server a été publié sur IT-Connect.
Fosko S.A., fabricant de contenants plastiques, a été victime d'une cyberattaque par ransomware de la variante LockBit 3.0. L'incident a été détecté lorsqu'un utilisateur n'a pas pu accéder à des fichiers de facturation. L'attaque a affecté deux postes de travail et un serveur de fichiers. L'entrepr...
Air Traffic and Navigation Services (ATNS) a été victime d'une cyberattaque par ransomware qui aurait potentiellement pu mettre à l'arrêt les activités de l'aviation commerciale en Afrique du Sud. L'enquête forensique est en cours pour déterminer l'origine de l'attaque, l'étendue des dommages et si...
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
The post 3 Consulting Myths Debunked by Unit 42 Experts appeared first on Unit 42.
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims...
Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]
Cameron Wagenius was involved in some of the most high-profile attacks of 2024 while on active duty.
The post Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies appeared first on CyberScoop.
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed. For the stable distribution (trixie), these problems have been fixed in
I feel like someone who reads this blog will want to go to this:
Families are invited to dive into the fascinating world of marine biology during an exciting, hands-on Family Squid Dissection at the Hands-On Science Center. Designed for curious learners of all ages, this unique experience combines a...