> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical issues and trends. A Ukrainian ransomware affiliate was sentenced to 70 months in prison for targeting hospitals and businesses, underscoring ongoing ransomware threats. The UK government is considering holding software companies liable for cyber breaches, which could reshape accountability in cybersecurity. Additionally, attackers are increasingly exploiting vulnerabilities in critical infrastructure, notably a 16-year-old UEFI flaw and a newly patched Oracle vulnerability. A significant data breach at Sony's internet provider exposed 2.6 million customer records, while the FBI continues to target "bulletproof" hosting services involved in criminal activities. Lastly, the rise of AI in security operations is prompting both optimism and caution as organizations adapt to new threats, including those involving fake apps that spread malware.
|
// AI-powered summary generated at 16:00
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint and Mikrotik RouterOS flaws flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnera...
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]
Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed media file is opened. For the stable distribution (trixie), these problems have been fixed in version 3.0.24-0+deb13u1.
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems for customers.”
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data security practices.
EFF legal intern Simar Kaur also contributed to this article.
Americans’ First Amendment right to equal access to official government statements is violated by the Trump administration’s use of Truth Social’s preferential treatment scheme, which blocks people who won’t pay Trump’s company up to $100...
More mockery and memes from the Dark Web Roast
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information disclosure, incorrect validation of TLS certificates or bypass of access control restrictions, For the stable distribution (trixie), these pro...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 154.0.8037.57-1~deb13u1.
Data theft and extortion biz, that is
A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]
Bitget says suspected North Korea-linked actors stole $351.6M from hot and warm wallets. Withdrawals were suspended while Mandiant investigates. Cryptocurrency exchange Bitget says suspected North Korea-linked threat actors stole $351.6 million from a limited number of hot and warm wallets. The comp...
Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should prevent the use of the database.
The post Supreme Court permits states to use SAVE database for citizenship checks appeared first on CyberScoop.
It’s cheap to set yourself up as a hacker these days using AI. Someone attacked 105 online retailers over a period of five days, compromising 27 of them — all for an average of $25 per attack, according to research by Israeli security company Gambit.
But the attacks have be...
The findings highlight how AI-generated and vibe-coded apps can spill and expose users' data when not configured or secured properly.
Nothing in the attack chain screams malicious software, except none of the impersonated HR and payroll providers actually offers a desktop app
The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]
Familiar fingerprints point to Kim’s regime … to the surprise of nobody
In June 2026, the Wordfence Bug Bounty Program received 1066 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelli...
Microsoft a publié l'ISO d'évaluation de Windows 11 Entreprise 26H2, disponible en français (90 jours sans clé). L'eKB pour migrer est disponible aussi.
Le post Windows 11 26H2 : voici comment télécharger l’image ISO d’évaluation a été publié sur IT-Connect.