> TODAY'S SUMMARY (15 articles)
Today's cybersecurity news highlights several significant threats and trends. South Africa leads a 13.4% growth in Sub-Saharan Africa's crypto economy, indicating increasing financial reliance on cryptocurrencies. A new zero-day vulnerability in VMware ESX, exploited by China-linked hackers, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. WordPress released a critical update addressing 22 vulnerabilities, including one allowing remote code execution. Additionally, threat actors are exploiting PHP2Shell vulnerabilities in publicly accessible Palo Alto Networks management interfaces. Meanwhile, the Multi-State Information Sharing and Analysis Center reported credential theft affecting K-12 school districts, highlighting ongoing challenges in credential security.
|
// AI-powered summary generated at 08:00
Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. [...]
More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.
Microsoft a corrigé le bug du copier-coller dans Excel 2016 à 2024. Sur Office 2016 et 2019, le collage peut encore échouer dans un cas bien précis.
Le post Bug copier-coller Excel : voici les correctifs pour Microsoft Office a été publié sur IT-Connect.
Why almost 90% of small companies have to deal with cyberincidents, and how to build a security setup without straining your budget or IT team.
Ghostscript could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in strongSwan.
Belgium’s national table tennis federation is investigating a cyberattack after a hacker claimed to have stolen data on tens of thousands of members.
Several security issues were fixed in ClamAV.
Memcached could be made to crash if it received specially crafted network traffic.
The Irish DPC found that Google users were unaware that their location was being used to influence them with ads
Microsoft has fixed a known issue that causes copy-and-paste failures for Excel users after installing the September 2026 security updates. [...]
Several security issues were fixed in libxml2.
Hackers captured a Flock camera and got a look (alternate link) at the software:
While much of the automatic license plate reader’s (ALPR) most sensitive storage remained encrypted and inaccessible, the joint analysis of the recovered data shows that software running on the device explicitly detects...
rsyslog could be made to crash if it received specially crafted network traffic.
Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic
Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be.
The post CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast appeared first on SecurityWeek.
Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks.
Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to imper...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week.
The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost t...