> TODAY'S SUMMARY (133 articles)
Today's cybersecurity landscape reveals significant threats and trends:
1. A Canadian has been extradited to the U.S. for allegedly hacking schools across multiple states and using their systems for illicit cryptomining.
2. DreamHost confirmed a data breach that exposed customer FTP logins and webmail sessions after attackers accessed its File Manager platform for two months.
3. Cyberattacks targeting French blood banks and other refrigeration systems across Europe have disrupted critical operations, highlighting vulnerabilities in essential services.
4. Crédit Mutuel Arkéa reported a cyber heist resulting in the theft of approximately $133 million through compromised supplier accounts.
5. A critical vulnerability in WordPress is actively being exploited, prompting warnings from the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
6. The rise of AI has introduced new challenges, with incidents of AI-generated malware and automated attacks linked to AI tools becoming increasingly prevalent.
|
// AI-powered summary generated at 20:00
Replacing letters with symbols still doesn’t make it good.
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
Sophos has launched Sophos CISO Advantage, an agentic AI-enabled solution that connects security operations to security strategy. The solution gives organizations a picture of their cyber risk, a prioritized plan to reduce it, and measurable proof of progress, in plain language that business leaders...
Alerte VosFactures : échanges suspendus avec l’AIFE, obligations de facturation et risques liés aux prestataires.
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
The post AI Has Changed Attack Speed, Not Security Fundamentals appeared first on SecurityWeek.
An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run...
Legit Security has announced an expansion of its Agentic Remediation capability to cover vulnerabilities found in open-source dependencies, not just first-party code, enabling development teams to move from vulnerability detection to a verified fix without manual triage. The expansion addresses a gr...
AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations genuine choice.
Cloudflare Workers is adding opt-in support for post-quantum-resistant algorithms ML-KEM and ML-DSA. You can try it today.
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek.
AI Search is now generally available. It embeds image pixels directly for visual search, runs optical character recognition on scanned PDFs, accepts files up to 10 MiB, and works with any chat model. Here's what's new and how pricing works.
Cloudflare is hosting a competition to see who will build the next Git platform for an era of AI agents. Artifacts is in open beta, with Workers bindings, data jurisdiction controls, and event subscriptions for repository changes.
It was discovered that libXpm did not correctly handle XPM images with
zero-dimension values. A local attacker could possibly use this issue to
cause libXpm to use excessive resources, leading to a denial of service.
Cloudflare K2 is a serverless event streaming service built directly on top of R2 object storage for high-scale data movement and long-term retention. By decoupling producers and consumers at the edge, K2 enables durable, ordered log streams without the operational overhead of traditional broker clu...
Cloudflare OS gives everyone in your organization an agent workspace that knows how your company works and connects to its data and systems. We’re opening the waitlist for fully managed deployments that you’ll be able to launch in a few clicks.
One of Poland’s major online invoicing platforms suffered a data breach that may have exposed information belonging to its users, their customers and business partners.
Workers KV Instant delivers sub-2ms p99 read latencies and 250ms global replication across Cloudflare’s 300+ edge locations. KV Instant eliminates cold-read penalties and uses the familiar Workers KV API.
Cloudflare Basin is built on Apache Iceberg and R2 Object Storage. With general availability, developers can ingest, manage, and query large datasets at scale without paying data egress fees.
The Pentagon’s Defense Manpower Data Center (DMDC) is notifying millions of people that hackers gained access to their personal data. The breach affects 2.76 million living individuals, a group that can include current and former defense personnel and their dependents, along with 294,000 deceased in...
OpenStack Designate could allow DNS traffic to be redirected or disrupted.