> TODAY'S SUMMARY (145 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a newly discovered vulnerability in Oracle E-Business Suite, prompting urgent patching efforts. The U.S. Treasury has sanctioned Russian and North Korean nationals for their involvement in fraudulent IT worker schemes, underscoring ongoing geopolitical cyber threats. In a concerning development, the Chinese state-sponsored group Volt Typhoon is leveraging a covert network to conduct zero-day attacks, while AI-driven hacks are increasingly targeting South Korea's financial sector. Additionally, significant vulnerabilities have been identified in software like PHP, with researchers warning of a potential "Vulnpocalypse" due to aging codebases. Companies are urged to update their systems promptly, as many recent breaches continue to expose vast amounts of sensitive data.
|
// AI-powered summary generated at 20:00
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network file system (NFS) server daemon;
- IPv6 networking;
- Netfilter;
(CVE-2025-38724, CVE-2026-53131, CVE-20...
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. [...]
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- PowerPC architecture;
- Compute Acceleration Framework;
- Driver...
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry.
The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at pr...
Several security issues were fixed in the Linux kernel.
Australia Says OpenAI Agent Hacked Medicare Portal Australian Prime Minister Anthony Albanese revealed that an OpenAI agent gained unauthorized access to non-public parts of the government’s Medicare statistics portal on June 18 while conducting internal research into public medicine spending, repe...
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings.
A few of the highlights:
AI agents increasingly handled reconnaissance, exploitation, data theft, propaganda production, surveilla...
Threshold signature schemes, a form of multi-party computation (MPC) that lets a set of parties sign together without any one of them holding the key, are increasingly deployed inside trusted execution environments (TEEs). The combination is intended to amplify security for sensitive computations: M...
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek.
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets.Â
"At 18:31 UTC on September 24, 2026, Bitget's security systems identified unauthorized transfers involving a limited number of hot wallets," BitGet said in a post shar...
Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the August 2026 preview updates and subsequent updates. [...]
The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild.
The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versi...
CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been active since at least October 2024. ThreatDown discovered the operation after finding an unauthenticated co...
Customers say they signed up for shipping rebates, then found recurring charges they didn’t expect.
Information published.
The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on SecurityWeek.
A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had its own website and was promoted on X...
As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data