> TODAY'S SUMMARY (78 articles)
Today's cybersecurity landscape reveals significant threats and vulnerabilities. A troubling report indicates that White House network addresses were exploited by multiple residential proxy services, raising concerns about data security. Attackers are actively probing for a recently identified remote code execution (RCE) vulnerability in WordPress, highlighting ongoing risks in widely used platforms. A zero-day vulnerability in Zyxel switches has been exploited despite previous patches failing to address the issue, putting numerous devices at risk. Meanwhile, the Indian CERT warns of AI-driven cyberattacks targeting fintech and crypto sectors. Additionally, phishing scams exploiting popular culture, such as the upcoming GTA 6 release, continue to proliferate, indicating a shift in tactics among cybercriminals. Organizations are urged to bolster their defenses against these evolving threats.
|
// AI-powered summary generated at 16:00
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, permission model bypass, incorrect certificate validation or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 20.19.2+dfsg-1+deb13u3.
ESET Direct Endpoint Management plugin for ConnectWise Automate Service Release 2.2 has been released and is available for download.
Exploit.in data shows how a 2005 cybercrime forum helped shape today’s ransomware ecosystem, with users and practices surviving for decades. Ransomnews researcher Dancho Danchev dug up a database dump of Exploit.in covering its first three years, from February 2005 to May 2008, and the numbers insid...
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. [...]
In an era of increasingly sophisticated AI-fueled scams, a retro threat may be lurking in your mailbox.
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
The post New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining appeared first on SecurityWeek.
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally.
The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could resul...
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discus...
OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and evaluation.”
The post OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure appeared first on SecurityWeek.
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site.
The cross-site request forgery (CSRF) vulnerability, which has yet to...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerabilities in question are as follows -...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress Core flaw, tracked as CVE-2026-87902 (CVSS score of 9.2), to its Known Exploited Vulnera...
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack.
"Kiteworks received credible threat intelligence from federal intelligence authorities indic...
Microsoft va déprécier le rôle WDS dès la prochaine version de Windows Server. Périmètre, calendrier et alternatives : voici ce que les admins doivent savoir.
Le post Après MDT, Microsoft lâche WDS : le rôle sera déprécié dans le prochain Windows Server a été publié sur IT-Connect.
Fosko S.A., fabricant de contenants plastiques, a été victime d'une cyberattaque par ransomware de la variante LockBit 3.0. L'incident a été détecté lorsqu'un utilisateur n'a pas pu accéder à des fichiers de facturation. L'attaque a affecté deux postes de travail et un serveur de fichiers. L'entrepr...
Air Traffic and Navigation Services (ATNS) a été victime d'une cyberattaque par ransomware qui aurait potentiellement pu mettre à l'arrêt les activités de l'aviation commerciale en Afrique du Sud. L'enquête forensique est en cours pour déterminer l'origine de l'attaque, l'étendue des dommages et si...
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
The post 3 Consulting Myths Debunked by Unit 42 Experts appeared first on Unit 42.
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims...
Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]