> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The fi...
The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. Iâm not optimistic.
As usual, you can also use this squid post to talk about the security stories in the news that I havenât covered.
Blog moderation policy.
The plaintiffs, who all worked for the independent and Salvadoran news outlet El Faro, failed to convince the court that their case had jurisdiction in California, according to the judgeâs order.
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palantir-built database, newly unsealed court filings say.
Republican Sen. Josh Hawley has new legislation on limiting automated license plate readers (ALPRs), while Democratic Sens. Bernie Sanders and Jeff Merkley, with Rep. Alexandria Ocasio-Cortez, have teed up a broader bill.
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. [...]
There has been a raft of site-blocking bills in the latest Congress, and the latest is called the âDeterring Extraterritorial Foreign Exploitation of Networks Damaging Intellectual Propertyâ aka the âDEFEND IP Act.â The problem is that instead of âdefending IP,â this bill will incentivize censorship...
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]
Apple says it will add new controls around macOSâs Full Disk Access permission, warning that increasingly capable AI agents make broad access to usersâ files, messages, mail, and browsing history riskier.
It was discovered that incomplete validation of MS-PPPE packets in radsecproxy, a Radius protocol proxy, could result in denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), this problem has been fixed in version 1.11.2-1+deb13u1.
Multiple security vulnerabilities have been discovered in the MongoDB driver for PHP, which could result in information disclosure, PHP objection injection or denial of service. For the stable distribution (trixie), these problems have been fixed in version 2.0.0-1+deb13u1.
Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under existing laws and regulations.
The post The legal questions raised by agentic AI hacks appeared first on CyberScoop.
Congress is taking another run at site-blocking, a deeply flawed concept that would undermine basic internet infrastructure. Rep. Darrell Issa (R-CA) has introduced the American Copyright Protection Act (ACPA), H.R. 10364, a bill that would give copyright owners a new legal tool to block Americansâ...
Mostly 'routine research tasks,' and 'some involved government websites, which our models often use,' AI giant tells The Reg
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor.
The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deploy...
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory.
The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gate...
L'autorité italienne de protection des données a sanctionné la société IQVIA pour avoir constitué une base de données de santé à partir d'informations prétendument anonymisées, jugeant que la persistance d'un code patient et la richesse des informations permettaient en réalité une ré-identification....
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems.
The vulnerabilities are listed below -
CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for...
Cette affaire analyse la balance entre le droit Ă l'effacement des donnĂ©es personnelles et l'intĂ©rĂȘt lĂ©gitime d'une institution religieuse Ă conserver des registres sacramentels, en l'occurrence le registre des baptĂȘmes. Elle illustre la complexitĂ© de l'application du RGPD lorsque celui-ci entre en...
L'Agence nationale de la sĂ©curitĂ© des systĂšmes dâinformation (ANSSI) a communiquĂ© sur une violation de donnĂ©es ayant affectĂ© son propre laboratoire d'innovation ainsi que deux instances de la Direction interministĂ©rielle du numĂ©rique (Dinum).L'attaque, survenue le 6 aoĂ»t 2026, a exploitĂ© une vulnĂ©ra...