> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
487 attaques par ransomware ont été recensées en juillet, en hausse de 41% sur un an
Les cybercriminels ne prennent pas de vacances. Preuve en est avec le dernier rapport de Check Point Research, l’équipe de recherche sur les menaces de la société israélienne. L’étude publiée le 11 août met en avan...
Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy
Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers the Android Virtualizatio...
A new technique has bypassed GPT-5’s safety systems via narrative-driven steering to elicit harmful output
Over 29,000 Microsoft Exchange servers remain unpatched against a vulnerability that could allow attackers to seize control of entire domains in hybrid cloud environments
Does your business truly understand its dependencies, and how to mitigate the risks posed by an attack on them?
The sophisticated campaign aims to steal credentials of sponsor license holders to facilitate immigration fraud, extortion and other monetization schemes
Rapid7 found that threat actors are able to purchase low-cost initial access broker services, with many packages offering a variety of options
Digital natives are comfortable with technology, but may be more exposed to online scams and other threats than they think
While “fairly primitive”, APT28’s LameHug was a testbed for future AI-powered attacks, said two MITRE experts during Black Hat USA 2025
New threat intelligence points to targeting of financial services and technology sectors by ShinyHunters group
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
Threat actors have stolen data on at least half a million cancer screening patients
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.