> TODAY'S SUMMARY (145 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a newly discovered vulnerability in Oracle E-Business Suite, prompting urgent patching efforts. The U.S. Treasury has sanctioned Russian and North Korean nationals for their involvement in fraudulent IT worker schemes, underscoring ongoing geopolitical cyber threats. In a concerning development, the Chinese state-sponsored group Volt Typhoon is leveraging a covert network to conduct zero-day attacks, while AI-driven hacks are increasingly targeting South Korea's financial sector. Additionally, significant vulnerabilities have been identified in software like PHP, with researchers warning of a potential "Vulnpocalypse" due to aging codebases. Companies are urged to update their systems promptly, as many recent breaches continue to expose vast amounts of sensitive data.
|
// AI-powered summary generated at 20:00
It was discovered that libpcap did not properly validate BPF instructions
in some situation. An attacker could possibly use this issue to perform out
of bound memory operations.
​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. [...]
EfficientIP says it flagged AliExpress phishing domains before they were registered
Flock Safety has stirred widespread debate of late. Flock builds interconnected networks of automated license-plate readers and other public safety cameras. Those systems can help police solve serious crimes, but they also log sensitive personal location data and make it searc...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The first...
Exactly on this day, September 25 2001, Apple shipped version 10.1 of their OS X operating system. The one they later would rename to macOS. Exactly twenty-five years ago today. Within all their fancy release presentations and videos there are barely no mentions of curl. In their technical notes pag...
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at WeAreDevelopers North America, Docker Cloud Sandboxes let organizations...
An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access tool, configured to let the attacker control the computer without...
It was discovered that PyJWT incorrectly handled certain URIs when using
PyJWKClient. A remote attacker could possibly use this issue to perform
server-side request forgery (SSRF) or expose sensitive local files.
This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu
26.04 LTS. (CVE-...
Abnormal AI has unveiled the newest additions to its AI Security suite, designed to help enterprises adopt AI securely while protecting against new threats created or accelerated by AI. The suite brings together Abnormal AI Governance, which is generally available, and AI Cloud Security, previously...
SentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest offering from SentinelOne’s Wayfinder team and combines the power of SentinelOne’s AI-powered Singularity Platform telemetry with expert human-led hun...
Jev de TypeSafe AI renvoie des décisions et des probabilités au lieu de texte. Tarif, latence, limites et différences avec les LLM d'OpenAI et Anthropic.
Le post Jev : cette IA qui ne génère aucun texte défie les LLM a été publié sur IT-Connect.
Dataiku has announced the launch of Agent Management, a standalone product that finds every AI agent an enterprise is running, regardless of which platform built it, measures the business and technical performance, and flags agents that pose the greatest risk. The launch addresses a disconnect betwe...
Une campagne TeamFiltration a visé 5 714 comptes Microsoft 365. Les 7 comptes compromis étaient des comptes de service oubliés, sans MFA.
Le post TeamFiltration : 7 comptes Microsoft 365 compromis, tous des comptes de service oubliés a été publié sur IT-Connect.
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent guardrails at the execution layer, limits context without expanding authority, and tunes...
Un agent IA d'OpenAI a accédé à des fichiers non publics d'un portail Medicare australien. OpenAI a mis près de trois mois à prévenir le gouvernement.
Le post Un agent IA d’OpenAI a piraté un portail du gouvernement australien a été publié sur IT-Connect.
Half of security professionals name data quality or quantity as their biggest barrier to effective threat hunting, according to the SANS 2026 Threat Hunting Survey. Teams with working playbooks describe the logs as their ceiling, and gaps in cloud logging and identity telemetry come up most often. G...
A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.
The data came from disk space that earlier containers had used and given up, not from any live workload,...