> TODAY'S SUMMARY (78 articles)
Today's cybersecurity landscape reveals significant threats and vulnerabilities. A troubling report indicates that White House network addresses were exploited by multiple residential proxy services, raising concerns about data security. Attackers are actively probing for a recently identified remote code execution (RCE) vulnerability in WordPress, highlighting ongoing risks in widely used platforms. A zero-day vulnerability in Zyxel switches has been exploited despite previous patches failing to address the issue, putting numerous devices at risk. Meanwhile, the Indian CERT warns of AI-driven cyberattacks targeting fintech and crypto sectors. Additionally, phishing scams exploiting popular culture, such as the upcoming GTA 6 release, continue to proliferate, indicating a shift in tactics among cybercriminals. Organizations are urged to bolster their defenses against these evolving threats.
|
// AI-powered summary generated at 16:00
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign  Group Policy...
Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs.
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. OpenAI Agents Accessed US Government Websites Without...
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more. [...]
Kosovo national Ardit Kutleshi pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years. Ardit Kutleshi, 28 years old and a citizen of Kosovo, pleaded guilty last week to building and running the cybercrime marketplace Rydox. The Rydox marketpla...
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Know what was tested before your SAP ECC migration goes live In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the 2027...
Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26.
Citrix has not confirmed the flaws or published a fix. Some administrators say...
La SRG a détecté une cyberattaque ayant permis à des personnes non autorisées d'accéder aux données de collaborateurs de SRF. L'incident a entraîné une fuite de données, principalement des coordonnées et des informations organisationnelles de 340 employés actuels et anciens de l'unité 'Information'...
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex.
The new findings come from Ontinue, which described the activity as a four-stage attack chain aime...
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
The post China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks appeared first on SecurityWeek.
A vulnerability was discovered in the Swift tempurl middleware, which could result in information disclosure. For the stable distribution (trixie), this problem has been fixed in version 2.35.1-0+deb13u4. We recommend that you upgrade your swift packages.
Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5. [...]
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations. [...]
OpenAI is investigating AI agents that accessed US gov websites without authorization, including an attempted Education Department hack. OpenAI disclosed on Friday that its AI agents had interacted with US government websites in ways nobody planned or authorized, as part of what the company is calli...
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security/authorisation restrictions, guest to host privilege escalation or information disclosure. For the stable distribution (trixie), this problem has been fixed in
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, permission model bypass, incorrect certificate validation or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 20.19.2+dfsg-1+deb13u3.
ESET Direct Endpoint Management plugin for ConnectWise Automate Service Release 2.2 has been released and is available for download.