> TODAY'S SUMMARY (15 articles)
Today's cybersecurity news highlights several significant threats and trends. South Africa leads a 13.4% growth in Sub-Saharan Africa's crypto economy, indicating increasing financial reliance on cryptocurrencies. A new zero-day vulnerability in VMware ESX, exploited by China-linked hackers, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. WordPress released a critical update addressing 22 vulnerabilities, including one allowing remote code execution. Additionally, threat actors are exploiting PHP2Shell vulnerabilities in publicly accessible Palo Alto Networks management interfaces. Meanwhile, the Multi-State Information Sharing and Analysis Center reported credential theft affecting K-12 school districts, highlighting ongoing challenges in credential security.
|
// AI-powered summary generated at 08:00
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
In April, I wrote about what I called the Cyber AI Parity Window. This is the rare period in which defenders and adversaries gained access to the same transformative technology at roughly the same moment. For most of cybersecurity history, advanced offensive capability reached...
Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.
Scammers are using a $249 website toolkit to sell unverified AI subscriptions worth up to $2,000 a year, and a genuine Google sign-in screen is what makes the sites convincing. Malwarebytes found more than 100 websites built this way, all tied to the same toolkit and closely related developer detail...
​Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). [...]
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
The post Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme appeared first on SecurityWeek.
Flare-ups between US intelligence agencies and private-sector defenders have long been a characteristic of the cybersecurity landscape, with the balance swinging between deep collaboration and friction.
The goal of CISOs has typically been to get adversaries out of networks...
In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of largely corporate contact data containing 17.8M unique email addresses, along with phone numbers, empl...
Click2Shell : un lien piégé ouvert par un administrateur WordPress suffit à installer un thème et exécuter du PHP. Installez WordPress 7.1.1 sans tarder.
Le post Click2Shell : une faille dans WordPress permet d’exécuter du code PHP en un clic a été publié sur IT-Connect.
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities.
"SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.ex...
En septembre 2026, le mini PC Geekom A5 Pro passe à 439 € au lieu de 549 €, soit 110 € de remise. Découvrez le code réservé aux lecteurs d'IT-Connect.
Le post Bon plan : le mini PC Geekom A5 Pro a le droit à 110 euros de réduction immédiate avec ce code a été publié sur IT-Connect.
Depuis les mises Ă jour de septembre 2026, l'Historique des fichiers de Windows 10 et Windows 11 peut cesser de fonctionner. Microsoft confirme, sans correctif.
Le post Windows : les mises à jour de septembre 2026 cassent l’Historique des fichiers a été publié sur IT-Connect.
North Korea-linked WaterPlum runs the Contagious Interview campaign, infecting over 30,000 devices using a fake job interview. On September 18, Japan’s National Police Agency, the FBI, the US Department of Defense’s Cyber Crime Center, and intelligence agencies from Australia and Germany published a...
Des services exposés avec TryCloudflare, censés être temporaires, sont indexés par Google : un vrai risque pour les utilisateurs qui en sont à l'origine.
Le post TryCloudflare : des services exposés en local se retrouvent indexés sur Google a été publié sur IT-Connect.
Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21.
It works by changing a hidden setting so that when the user taps the micropho...
Researchers from the i2CAT Foundation, the University of Murcia, and NEC Laboratories Europe built a low-cost tool called 5G-Shark that lures a target phone onto a fake base station and questions it, then used it to audit commercial 5G networks. On the standalone-5G networks they tested, operators c...
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server.
WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed "Comment2Shell," on Sep...