> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Google has introduced its Gemini 4 Carbon model, demonstrating advanced capabilities in vulnerability detection and patching. Meanwhile, AI technologies are increasingly being exploited by malware, as seen with NIK C2 using OpenAI keys and the Yoba malware spreading through fake ChatGPT applications. The U.S. election security remains a concern with unpatched voting machines and the risk of AI-driven influence campaigns. Recent cyberattacks have disrupted services at Belgium's tax agency and targeted sensitive data from the U.S. Department of Homeland Security. Additionally, multiple vulnerabilities in Cisco products and a significant data breach at Sony's ISP point to ongoing exploitation of software flaws. Organizations are urged to prioritize patching and enhance their cyber resilience strategies.
|
// AI-powered summary generated at 16:01
WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets
The rise in AI-generated security threats may just have generated one casualty: the death of the weekly bulletin of security threats from the US Cybersecurity Infrastructure and Security Agency (CISA).
The agency will discontinue its weekly bulletin of known vulnerabilities...
AI, fake uniforms, and mock offices help crooks sell the con
TeamPCP pulled off the worst-ever software supply-chain hacking spree and breached thousands of companies. Now Google’s threat intelligence group says it had a mole inside the hackers’ inner circle.
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6Â million user records. [...]
The U.S., Japan, Germany and Australia said WaterPlum operators pose as prospective employers and have infected more than 30,000 devices worldwide.
The post International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data appeared first on CyberScoop.
The feds are said to be investigating the compromise of the tankers' networks, which in one case interfered with one of the tanker's navigation and propulsion systems.
Popular AI coding agents such as OpenAI’s Codex, Anthropic’s Claude Code, Google’s Gemini CLI, and Microsoft-owned GitHub Copilot were vulnerable to a zero-click attack that enabled attackers to execute malicious code, even without developer interaction, by swapping a trusted...
RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan.
The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tool...
 An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
Microsoft 365 users are being tricked into handing over access to their accounts by a new phishing kit, GhostCode, that exploits a weakness in a legitimate device authorization flow. Researchers in eSentire’s threat response unit identified the campaign in late August 2026....
A report published Wednesday said that as of July, Vietnam, Laos, Pakistan and Argentina took meaningful steps to respond to allegations involving North Korea listed in an October study.
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug exploited.
The post In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw appeared first on SecurityWeek...
rclone could be made to run programs if it received specially crafted network traffic.
An unreleased OpenAI model wrote instructions telling itself to ignore developer controls. Here’s what actually happened.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access governance and owner-driven reviews can help identify and re...
Security researchers used Anthropic’s Claude to exploit vulnerabilities in OpenAI’s systems, taking over employee accounts and gaining access to an internal code repository before reporting the flaws.
Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements. [...]