> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Citrix customers are urged to patch their vulnerable NetScaler appliances, but “patching alone won’t cut it,” experts said
EU security agency ENISA is being handed €36m to operate the EU Cybersecurity Reserve
In a brand-new collaboration between ethical hacking and AppSec expert John Hammond and world-renowned security researcher James Kettle, the pair explore how tens of millions of websites are compromis
Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back
Google is warning of a new credential theft campaign targeting Salesforce customers via Salesloft Drift
Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It seems like every manufacturer of anything electrical that goes in the house wants to be part of the IoT story these days. Further, they all want their own app, which means you have to...
This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-9276.
In June 2025, 107k unique customer email addresses were allegedly obtained from TheSqua.re, the "easiest way to find your next serviced apartment". The data also included names, phone numbers and cities which were subsequently posted to a popular hacking forum. TheSqua.re did not respond to repeated...
Le Centre de services scolaire des Appalaches a été victime d'une attaque par rançongiciel, les pirates revendiquant avoir obtenu 180 Go de données de l'organisation, dont des informations personnelles sur les élèves et les employés. L'organisation a repris le contrôle de ses serveurs et travaille a...
Saint Mary’s Home of Erie experienced a data breach where files and folders stored on certain databases may have been accessible to others outside of their organization between August 26, 2025, and August 28, 2025. A cyberattack was claimed by Worldleaks on October 3.
The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats
Kovack Financial, LLC experienced a data breach between August 8, 2025, and August 27, 2025, where an unknown actor gained access to files within their network. The breach was discovered on July 16, 2026. The incident may have impacted some of the company's information.
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2062.0 have been released and are available for download.
A new version of the Hook Android banking Trojan features 107 remote commands, including ransomware overlays
A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter
Written by: Austin Larsen, Matt Lin, Tyler McLellan, Omar ElAhdan
Update (August 28)
Based on new information identified by GTIG, the scope of this compromise is not exclusive to the Salesforce integration with Salesloft Drift and impacts other integrations. We now advise all Salesloft Drift custom...
On the day AWS Kiro was released, I couldn’t resist putting it through some of my Month of AI Bugs security tests for coding agents.
AWS Kiro was vulnerable to arbitrary command execution via indirect prompt injection. This means that a remote attacker, who controls data that Kiro processes, could h...
Key findings: Introduction Check Point Research (CPR) has been closely monitoring the activity of a highly persistent and sophisticated threat actor who leverages social engineering tactics to gain the trust of targeted U.S.-based organizations. While analyzing the phishing lures used by the actors,...
All previously scheduled mobility trips across Maryland for this week will be honored, said the state’s transportation administration