> TODAY'S SUMMARY (13 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant vulnerability in APT allows verified packages to be replaced and executed with root access on Debian and Ubuntu systems. In the U.S., a Canadian man faces charges for hacking university supercomputers to mine cryptocurrency. CISA warns that hackers are exploiting a patched Apple flaw to deliver info-stealing malware. Companies are increasing their cybersecurity budgets, especially for AI governance, but still struggle with control. Additionally, advancements in AI are intensifying concerns over security, as evidenced by the growing sophistication of AI agents and supply chain attacks, such as the one targeting OpsShield.
|
// AI-powered summary generated at 08:00
Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today&#;x26;#;39;s update for the curr...
New pcre2 packages are available for Slackware 15.0 and -current to fix a security issue.
New groff packages are available for Slackware 15.0 and -current to fix security issues.
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code.
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...]
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]
The San Francisco Police Department (SFPD) began regularly deploying drones two years ago and has since expanded their use in a way that has outpaced its documented policy and evaded existing local and state oversight of these devices.Â
The department has a new proposed policy, which continues to be...
Smells like more agentic ransomware, Redmond warns
USN-8487-1 fixed vulnerabilities in curl. Unfortunately that update
contained an incomplete fix for CVE-2026-8927. This update fixes the
problem.
Original advisory details:
Andrew Nesbitt discovered that curl could reuse an existing live
connection during STARTTLS-based connection upgrades even...
Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar analyzed stealer log data from the last 90 days and found 482 companies with exposed AI accounts and credentials. Of those, 295 appeared in activ...
Michał Majchrowicz and Marcin Wyczechowski discovered that libevent
incorrectly handled certain DNS responses. A remote attacker could possibly
use this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-63387)
It was discovered that libevent incorrectly handled certain connect...
Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]
A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs site.
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks.
The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to...
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]
Multiple vulnerabilities have been discovered in the Dovecot IMAP server which could result in denial of service, SMTP smuggling, information disclosure, code injection via malformed Sieve scripts or bypass of ACL restrictions. For the stable distribution (trixie), these problems have been fixed in
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code execution. For the stable distribution (trixie), these problems have been fixed in version 6.8.10+dfsg1-0+deb13u1.
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis.
The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits,...
One expert told CyberScoop that the announcement reflects industry recognition that after years of training models to behave safely or ethically, more outside controls are needed.
The post As AI world debates security, NVIDIA releases open source tools for agents appeared first on CyberScoop.
What is IAM for AI agents?
AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how t...