> TODAY'S SUMMARY (45 articles)
Recent cyber threats show a significant rise in supply chain attacks, with attackers exploiting GitHub issues to compromise 61 public repositories in under an hour. Impersonation tactics are increasingly used to extract sensitive credentials from organizations, targeting major AI firms like OpenAI and Meta. Cisco is facing challenges with multiple zero-day vulnerabilities in its firewall software, leading to remote crashes and exploitation for malware deployment. Online scams have surged, overtaking phishing attempts, while significant data breaches, including the theft of 2.6 million records from Sony’s ISP, highlight the ongoing risks to personal information. Additionally, hacktivist groups are leaking sensitive government employee data, emphasizing the need for robust data protection measures.
|
// AI-powered summary generated at 12:01
Claims by officials of cyberattacks against election infrastructure could not be independently verified. Russian officials provided little technical evidence about the attacks or who it claimed who was behind them.
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed PSD, light effects filter, ICO, PIX or PCX files are opened. For the stable distribution (trixie), these problems h...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below...
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts. [...]
An AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation during the Iran war. According to CNN, four sources familiar with the episode say an intelligence report circulated through the military claiming a Chinese vessel in the Middle...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click Backdoor  Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit Malic...
Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both. [...]
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank co...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Google Gemini also Broke Out of Its Test Environment...
Boryung Biopharma a été victime d'une infection par rançongiciel, ce qui a entraîné la coupure du réseau du siège social et des usines (y compris Jincheon). Cette attaque a perturbé la distribution de médicaments depuis la mi-mois. L'entreprise a également signalé une possible fuite de données perso...
La société SK Logi a annoncé avoir été victime d'une cyberattaque par accès non autorisé à ses systèmes internes. L'incident, survenu le 20 septembre 2026, a entraîné l'arrêt de son système de commande et des difficultés dans la gestion des expéditions et des stocks. Les autorités sont actuellement...
New Socials
La Banque de Sang de Cordons de Boryeong (Boryeong Saedaehyeol Bank), la première banque de sang de cordons en Corée du Sud, a signalé une possible fuite de données personnelles de mères et d'enfants suite à une infection par ransomware de son système de traitement des informations personnelles le 2...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 153.0.8010.52-1~deb13u1.
Google said Gemini had "acted appropriately" by ending each hack immediately.
UGREEN a étoffé sa gamme Nexode Pro avec un chargeur mural de 160 watts et un chargeur de bureau de 300 watts. Ils ont le droit à un écran intelligent.
Le post UGREEN Nexode Pro : deux chargeurs avec écran intelligent, dont un que j’ai pris en main a été publié sur IT-Connect.
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver, which could result in denial of service, cache poisoning, DNS cookie bypass or potentially the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixe...
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]
The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.
The post TigerByte Cyber Emerges From Stealth With $3 Million in Funding appeared first on SecurityWeek.
High time to stop kicking the security can down the road, investor tells The Reg