> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant developments in cybercrime and high-profile hacking incidents. Authorities have seized the domain of Virtualine, a prominent bulletproof hosting provider that facilitated cybercriminal activities, accounting for nearly 20% of illicit traffic tracked this year. Meanwhile, a new report suggests that Jared Kushner’s iPhone was allegedly hacked twice, involving both Dutch intelligence and Russian hackers, raising concerns about the security of personal devices among prominent figures. These events underscore the ongoing threats posed by organized cybercrime and the vulnerabilities of even high-profile individuals to sophisticated hacking attempts.
|
// AI-powered summary generated at 04:00
WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated local file inclusion, tracked as CVE-2026-87902 (CVSS score of 9.2), which stems of how the C...
Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.
The post Critical F5 BIG-IP Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.
F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. [...]
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.Â
The post ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report appeared first on SecurityWeek.
A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said.
The risk applies when an app puts values an attacker controls, such as text read from the request URL, into th...
32 GW en service et 70,6 GW en construction ou en projet : la capacité américaine écrase le reste du monde. Et la France, où en est-elle ? Les chiffres.
Le post Data centers : les États-Unis pèsent plus lourd que 14 pays réunis a été publié sur IT-Connect.
The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts.
The post Check Point Patches Exploited Management Server Zero-Day appeared first on SecurityWeek.
ShinyHunters affirme avoir volé 2 à 3 To de données au FBI via une faille zero-day dans Oracle PeopleSoft. En échange, il exige le retrait d'un rapport.
Le post Le FBI piraté ? ShinyHunters ne veut pas d’argent, mais le retrait d’un rapport a été publié sur IT-Connect.
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency.
"We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals who...
Prismor is a free, open-source security layer for AI coding agents. It sits between an agent such as Claude Code, Codex, or Cursor and the actions that agent wants to take, and it checks each tool call against a policy before the call runs. Every call gets one of three verdicts: allow, warn, or bloc...
Presently sponsored by: SACR's Endpoint Control and Prevention report, live Oct 1 with its author and Origin's founder, deep on endpoint AI observability. Register.Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving - sorry! But get through that and have a...
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. T...
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. T...
Scamwise is a free scam-checking service from Savi that examines suspicious messages, emails, websites, phone numbers, images, and real-world situations for signs of fraud. The service works in any web browser on desktop, mobile, or tablet, with no account required. Scamwise is included in the Savi...
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. T...
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. T...
Malicious bot activity increased 124% between July 2025 and June 2026, compared with 13.2% growth in human traffic. Traffic from AI agents and large language model crawlers rose 82.3% during the same period, according to DataDome’s State of Bot & Agent Security Report 2026. Bot traffic grows nin...
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. T...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: