> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
Andrew Walker discovered that Samba incorrectly initialized memory in the
vfs_streams_xattr module. An authenticated attacker could possibly use this
issue to obtain sensitive information. (CVE-2025-9640)
Igor Morgenstern discovered that Samba incorrectly handled names passed to
the WINS hook progr...
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
Phishing is a tried-and-true attack vector. These attacks account for 15% of all data breaches, according to IBM. Security leaders are well aware of the risks, and it is standard for enterprises to put their employees through from some kind of phishing training. But that train...
Updated an acknowledgement. This is an informational change only.
Revised the packages to include Download Center ID for this vulnerability.
USN-7824-1 fixed several vulnerabilities in Redis. This update provides
the corresponding update for Ubuntu 22.04 LTS.
Original advisory details:
Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly
handled memory when running Lua scripts. An authenticated attacker could use...
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
A flow chart describing some steps and decisions done within curl when a HTTP URL is provided. For hostnames, protocol and port numbers. This flow chart ignores proxies, authentication considerations and use of unix domain sockets to keep things simpler. URL An initial step is of course to extract t...
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
USN-7824-1 fixed several vulnerabilities in Redis. This update provides
the corresponding update for Redict - a fork of Redis.
Original advisory details:
Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly
handled memory when running Lua scripts. An authenticated attacker c...
Revised the packages to include Download Center ID for this vulnerability.
Revised the packages to include Download Center ID for this vulnerability.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The f...
Revised the packages to include Download Center ID for this vulnerability.