> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot
Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes for...
Le département de police de North St. Paul a été visé par une cyberattaque, ce qui a conduit à une réunion d'urgence du conseil municipal pour répondre à l'attaque. Les détails de la cyberattaque n'ont pas été divulgués. La ville a approuvé un contrat avec un cabinet d'avocats pour enquêter et exami...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Connex Credit Union.
This year I spent a lot of time reviewing, exploiting and working with vendors to fix vulnerabilities in agentic AI systems.
As a result, I’m excited to announce the Month of AI Bugs 2025!
Goal Of The Initiative The main purpose of the Month of AI Bugs is to raise awareness about novel security vuln...
Avosina Healthcare Solutions experienced a data breach on July 29, 2025, where an unknown third party accessed and compromised certain data within their systems. The impacted information may have included names, addresses, medical information, and health insurance information. A cyberattack was clai...
10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin
Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors
Today we’re announcing the beta release of mcp-context-protector, a security wrapper for LLM apps using the Model Context Protocol (MCP). It defends against the line jumping attacks documented earlier in this blog series, such as prompt injection via tool descriptions and ANSI terminal escape codes.
Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers
Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing
Adobe ColdFusion 2023.6 - Remote File Read
Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers
Dating app Tea has been compromised by a hacker, resulting in the exposure of 13,000 selfies
Get ready to take on Hacker Summer Camp with our guide on planning, prepping, and schedules for Datadog events.
FranceLink a été victime d'une attaque informatique, ce qui a entraîné la fermeture temporaire de son standard téléphonique et des perturbations dans ses services, notamment la perte de données. L'équipe de FranceLink travaille activement à la récupération des données et à la reconstruction de ses i...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Ahtna, Inc. suffered a data breach between April 20, 2025, and June 1, 2025, resulting in unauthorized access to certain files containing personal information, including names and Social Security numbers. The breach was discovered on July 28, 2025. A cyberattack against Ahtna was claimed by Qilin on...
The Echo Design Group, Inc. suffered a data breach between July 25, 2025, and July 28, 2025, resulting in unauthorized access to human resources and accounting documents. The breach was discovered on July 28, 2025. A cyberattack against Echo was claimed by Akira on August 27.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.