> TODAY'S SUMMARY (15 articles)
Today's cybersecurity news highlights several significant threats and trends. South Africa leads a 13.4% growth in Sub-Saharan Africa's crypto economy, indicating increasing financial reliance on cryptocurrencies. A new zero-day vulnerability in VMware ESX, exploited by China-linked hackers, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. WordPress released a critical update addressing 22 vulnerabilities, including one allowing remote code execution. Additionally, threat actors are exploiting PHP2Shell vulnerabilities in publicly accessible Palo Alto Networks management interfaces. Meanwhile, the Multi-State Information Sharing and Analysis Center reported credential theft affecting K-12 school districts, highlighting ongoing challenges in credential security.
|
// AI-powered summary generated at 08:00
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week.
The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost t...
Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies.
Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts.
The backdoor "automatically harvests and exfiltrates business documents, watches the filesystem for new files in real t...
Un père américain affirme que son fils de 9 ans a dépensé 118 000 dollars en publicités YouTube avec sa carte d'entreprise, mais c'est bien lui le fautif.
Le post Un enfant de 9 ans aurait dépensé 118 000 dollars en publicités YouTube avec la carte pro de son père a été publié sur IT-Connect.
The FBI's CJIS Security Policy v6.1 strengthens requirements around encryption and vulnerability scanning while continuing the shift toward more continuous security assessment. Specops explains what changed and how agencies can address password, MFA, and identity requirements as they prepare for upc...
The university, commonly known as LMU Munich, said Saturday that an attacker accessed enrollment data stored on one of its IT systems.
Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi passwords and clipboard text, takes screenshots, and runs...
The ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted on the site over the weekend.
The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push.
The post Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal appeared first on SecurityWeek.
In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approximate geolocations, with the d...
It was discovered that Expat could be made to allocate large amounts of
memory when parsing a small crafted document. An attacker could possibly
use this issue to cause Expat to consume resources, leading to a denial of
service. This issue was only addressed in Ubuntu 24.04 LTS.
(CVE-2025-59375)
It...
Readiness tagging for AI, always-on observability, and coordinated kill switches at the application layer give enterprises a defensible route to scaling agents while keeping authority in human hands.
New York, London – September 15, 2026 – Orchid Security, which unlocks saf...
Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server. Blackpoint’s Adversary Pursuit Group was chasing a ClickFix campaign spreading an unknown RAT namend ChainScript. The malicious code is a previously undocumented Node.js remote...
CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027. [...]
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Bluetooth drivers;
- GPU drivers;
- Hardware monitoring drivers;
- SPI subsystem;
- NTFS3 file system;
- i...