> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several significant threats and trends. A large-scale watering hole campaign attributed to the Russian state-sponsored group APT29 is actively targeting iOS and Android devices, raising concerns for users in the US and Europe, particularly Ukraine. Scammers are exploiting the hype around the upcoming Grand Theft Auto VI release to distribute malware and crypto scams. Meanwhile, a major breach at Norway's aid agency has reportedly compromised user data, particularly of those in sensitive regions. On the technological side, Google is enhancing its AI tool for vulnerability detection, while recent findings show a concerning rise in AI-driven attacks, necessitating better governance and controls. Additionally, vulnerabilities in Zyxel switches and a critical flaw in Apple's systems continue to pose risks, underscoring the importance of timely patches and security measures.
|
// AI-powered summary generated at 12:00
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Plus de 2 000 connecteurs et plugins, des agents IA et des intégrateurs réunis au même endroit : Anthropic lance la Claude Marketplace. Pour qui ? Pourquoi ?
Le post Claude Marketplace : Anthropic réunit plus de 2 000 connecteurs et plugins au même endroit a été publié sur IT-Connect.
Several security issues were fixed in libvirt.
Several security issues were fixed in libvirt.
A former soldier in the U.S. Army was sentenced to more than five years in federal prison after pleading guilty to hacking into several telecommunications companies and leaking sensitive records.
Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers.
The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek.
Active-duty campaign targeted at least ten organizations and sought $1 million in ransom payments
It was discovered that FreeRDP contained multiple security issues. An
attacker could possibly use these issues to obtain sensitive information,
cause FreeRDP to crash, resulting in a denial of service, or execute
arbitrary code.
Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s visits to popular websites in Firefox, and every site it flagged...
It was discovered that Exim had an out-of-bounds write when
Proxy-Protocol was used with an attacker-controlled proxy. A remote
attacker could possibly use this issue to execute arbitrary code.
(CVE-2026-94054)
It was discovered that Exim had a use-after-free when certain
non-default TLS settings w...
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users.
According to Okta’s Global CISO Insights 2026 report, only 47% of CIS...
It was discovered that libvirt did not properly validate newline characters
in DNS TXT record values and SRV record attributes in its virtual network
driver. A local attacker with permission to define virtual networks could
possibly use this issue to inject arbitrary dnsmasq configuration
directives...
It was discovered that libvirt had an integer overflow vulnerability in
the NodeGetFreePages RPC handler. A local attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-18917)
It was discovered that libvirt did not correctly handle symbolic links
wh...
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent.
"The implant installs the framework unchanged, then overwrites its SOUL.md per...
NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that controls what an agent can access, and Sentry, a watchdog in the...
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydney researchers Anudeex Shetty, Aditya Joshi and Salil Kanhere, published in their paper “In Vino Veritas and Vulnerabilities.” “The key researc...
The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed.
The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek.
ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring.
First, this attack isn’t new. The original research is from 2007. What is new is the implementation.
Second, it is a forgery attack. It allows an attacker to forge digital signatures. It does not recover the private...