> TODAY'S SUMMARY (45 articles)
Recent cyber threats show a significant rise in supply chain attacks, with attackers exploiting GitHub issues to compromise 61 public repositories in under an hour. Impersonation tactics are increasingly used to extract sensitive credentials from organizations, targeting major AI firms like OpenAI and Meta. Cisco is facing challenges with multiple zero-day vulnerabilities in its firewall software, leading to remote crashes and exploitation for malware deployment. Online scams have surged, overtaking phishing attempts, while significant data breaches, including the theft of 2.6 million records from Sony’s ISP, highlight the ongoing risks to personal information. Additionally, hacktivist groups are leaking sensitive government employee data, emphasizing the need for robust data protection measures.
|
// AI-powered summary generated at 12:01
The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion.
The post RatHat Android Trojan Uses AI for Automation appeared first on SecurityWeek.
Fastly has announced AI Runtime Control, AI Firewall, and new API Security capabilities designed to give organizations real-time visibility and control across their AI systems. Expanding the Fastly for AI portfolio, these new capabilities help organizations govern AI model access and usage, protect...
Rival crew demands eight figures and threatens to expose companies that paid to keep quiet
It was discovered that libxml2 incorrectly handled certain XML elements
under certain circumstances. An attacker could possibly use this issue to
cause libxml2 to crash or execute arbitrary code. (CVE-2026-86140)
It was discovered that libxml2 incorrectly handled certain XML documents
when used wit...
ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data
Google’s artificial intelligence model Gemini accessed computer systems belonging to three real companies without authorization during a cybersecurity test in May — the latest in a string of similar incidents.
Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and accounts and, ultimately, publish malware. The warning came last week from the Rust Project’s crates.io team and security...
The EU Commission draft law to restrict young people’s access to the internet that it presented last week will come at a high cost: it will make internet access contingent on age, expand the use of intrusive age verification, and undermine the privacy of all users.Â
The EU Kids Act aims to protect c...
Ireland’s Data Protection Commission (DPC) has fined Google €403 million (about $463 million) over its processing of users’ location data and ordered the company to bring that processing into compliance within six months. The inquiry examined Google’s practices from May 25, 2018, to February 4, 2020...
It was discovered that rsyslog incorrectly calculated buffer sizes when
replacing strings. A remote attacker could possibly use this issue to cause
rsyslog to crash, resulting in a denial of service.
It was discovered that strongSwan incorrectly handled PKCS#7 containers
in the openssl plugin. A remote attacker could possibly use this issue
to cause strongSwan to crash, resulting in a denial of service.
(CVE-2026-78123)
It was discovered that strongSwan incorrectly handled memory when
enumerati...
Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.
It was discovered that ClamAV incorrectly handled certain zip archive
files. A remote attacker could possibly use this issue to cause ClamAV
to crash, resulting in a denial of service. (CVE-2026-20337,
CVE-2026-20338)
It was discovered that ClamAV incorrectly handled certain PESpin files.
A remote...
It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea.
The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWeek.
Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates. [...]
Born out of academia and raised in corporate IT departments, the Security Assertion Markup Language (SAML) authentication protocol continues to be a staple in these organizations. However, it’s time for it to retire. With the rise of software-as-a-service (SaaS) companies in the late aughts, IT depa...
The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack.
The post CrowdSec Confirms Source Code Stolen in Supply Chain Attack appeared first on SecurityWeek.
Scammers are posing as police officers and federal agents, threatening arrest unless victims pay up, the FBI warns. The FBI’s Internet Crime Complaint Center (IC3) updated an alert it first issued in 2022, citing “losses totaling more than $1.6 billion” between January 2025 and July 2026. According...
Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten national security.
Attackers are courting crate owners with plausible company profiles and booby-trapped recruitment calls