> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several significant threats and trends. A large-scale watering hole campaign attributed to the Russian state-sponsored group APT29 is actively targeting iOS and Android devices, raising concerns for users in the US and Europe, particularly Ukraine. Scammers are exploiting the hype around the upcoming Grand Theft Auto VI release to distribute malware and crypto scams. Meanwhile, a major breach at Norway's aid agency has reportedly compromised user data, particularly of those in sensitive regions. On the technological side, Google is enhancing its AI tool for vulnerability detection, while recent findings show a concerning rise in AI-driven attacks, necessitating better governance and controls. Additionally, vulnerabilities in Zyxel switches and a critical flaw in Apple's systems continue to pose risks, underscoring the importance of timely patches and security measures.
|
// AI-powered summary generated at 12:00
Citrix has confirmed exploitation of two critical zero-day RCE bugs
Cyber threat groups have increasingly targeted enterprise AI assets, such as credentials, cloud environments, and research, as a means for operationalizing their own use of AI. Now, another sophisticated means for obfuscating illegitimate use of AI resources is coming more cle...
LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough confirmations, LinkedIn adds a verification badge to their profile. Mem...
Données du Club TotalEnergies dérobées chez un prestataire : informations exposées, risques et questions en suspens.
Multiple security issues were discovered in libheif, an ISO/IEC 23008-12 HEIF and AVIF image file format decoder and encoder, which may result in denial of service, the disclosure of sensitive memory contents or, potentially, the execution of arbitrary code if a malformed image file is processed.
Citrix confirme l'exploitation de deux nouvelles failles zero-day critiques dans NetScaler ADC et Gateway. Voici les versions à installer pour se protéger.
Le post « Éteignez vos NetScaler » : Citrix confirme 2 failles zero-day critiques déjà exploitées a été publié sur IT-Connect.
Mail, drive, visio, chat et IA : Octave Klaba confirme l'arrivée d'OVHai Workspace, l'alternative d'OVHcloud à Microsoft 365. Voici ce que l'on sait.
Le post OVHcloud confirme OVHai Workspace, son alternative à Microsoft 365 dopée à l’IA a été publié sur IT-Connect.
Cinquième CTF d’ingénierie sociale au HackFest Québec : mes entraînements, mes objectifs pour 2026 et ma recherche de sponsors.
Sous Proxmox VE, vos interfaces s'appellent nic0, nic1… Voici comment les renommer avec pve-network-interface-pinning sans perdre l'accès au serveur.
Le post Proxmox VE : renommer les interfaces réseau avec pve-network-interface-pinning a été publié sur IT-Connect.
Microsoft suspend la mise à jour KB5002907 : sur des PC équipés d'Office 2016 ou 2019, elle désactive la licence, voire supprime complètement la suite Office.
Le post Microsoft suspend la mise à jour KB5002907 : elle peut désactiver la licence Office a été publié sur IT-Connect.
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]
Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772.
The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek.
Presently sponsored by: If an AI agent caused an incident tomorrow, what evidence could you produce? Origin and analyst firm SACR answer it live Oct 1. Register.How's that view?! With NDC Oslo now done, it's a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott's and...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
The vulnerabilities are listed below -
CVE-2026-88771 (CVSS score:...
A list of topics we covered in the week of September 21 to September 27 of 2026
Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. [...]
Several security issues were fixed in PyJWT.
In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on developer machines and in cloud services. Latimer explains how attackers...
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian...