> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Google has introduced its Gemini 4 Carbon model, demonstrating advanced capabilities in vulnerability detection and patching. Meanwhile, AI technologies are increasingly being exploited by malware, as seen with NIK C2 using OpenAI keys and the Yoba malware spreading through fake ChatGPT applications. The U.S. election security remains a concern with unpatched voting machines and the risk of AI-driven influence campaigns. Recent cyberattacks have disrupted services at Belgium's tax agency and targeted sensitive data from the U.S. Department of Homeland Security. Additionally, multiple vulnerabilities in Cisco products and a significant data breach at Sony's ISP point to ongoing exploitation of software flaws. Organizations are urged to prioritize patching and enhance their cyber resilience strategies.
|
// AI-powered summary generated at 16:01
Cross-environment attacks demand a new approach to security operations. Learn how Unit 42 Managed XSIAM helps SOC teams investigate complete attack paths.
The post Inside the Modern SOC: Defending the Cross-Environment Pivot appeared first on Unit 42.
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices. [...]
European organizations can run AI workloads on Amazon Web Services (AWS) while keeping data within the European Union (EU) and meeting regulatory requirements. You can now run generative AI workloads on open weight models on Amazon Bedrock in the AWS European Sovereign Cloud. We’re excited to announ...
Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is used for enterprise network access control and policy enforcement. This is the second zero-day flaw Cisco has been forced to rele...
The latest zero-day has a maximum-severity rating and affects Cisco Identity Services Engine, a product hit with three actively exploited vulnerabilities since June 2025.
The post Cisco alerts customers to second actively exploited zero-day in as many days appeared first on CyberScoop.
Several security issues were fixed in Bubblewrap.
The proposal, known as the EU KIDS Act, would block social media platforms from offering accounts to children younger than 13 and establish a bloc-wide minimum age of 15 for account creation.
How malicious Chrome extensions steal passwords, drain cryptocurrency wallets and display fake ClickFix instructions, and what to do if you find one of these extensions installed in your browser.
Wordfence Argus discovered a PHP Object Injection vulnerability in Tutor LMS, affecting more than 100,000 WordPress sites. Subscriber-level attackers could achieve remote code execution. Update to version 4.0.8 as soon as possible.
The post 100,000 WordPress Sites Exposed to Remote Code Execution vi...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 153.0.8010.47-2~deb13u1.
A California law that prohibits teens from receiving recommended social media content from other social media users violates their First Amendment rights, EFF argued this week.
The case, Meta v. Bonta, challenges SB 976, which requires that teen social media users get their parents’ permission befor...
Eve's dropping in on Alice and Bob
While large language models present real risks to society, experts say they can be tested and largely controlled using well-worn cybersecurity and policy choices.
The post The AI hacking apocalypse is not inevitable appeared first on CyberScoop.
OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and leveraging exposed API keys. [...]
Two reports reveal how Flock’s license plate camera network tracks people’s movements while oversight continues to lag.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service or cache poisoning. For the stable distribution (trixie), these problems have been fixed in version 1:9.20.29-1~deb13u1. We recommend that you upgrade your bind9 packages.
Des pirates ont compromis le dépôt itorrents.org pour diffuser MovieReaper, un malware déguisé en films comme The Odyssey. Kaspersky présente cette menace.
Le post iTorrents.org compromis pour distribuer un malware Windows à la place des films a été publié sur IT-Connect.
It was discovered that incorrect state cookie parsing in mod_auth_openidc, an OpenID Certified authentication and authorisation module for the Apache HTTP server that implements the OpenID Connect Relying Party functionality, could result in denial of service. For the stable distribution (trixie), t...
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network.
The Security Management Server is the system that controls firewall policy and administrator access. Check Point has...
Cyberattacks on oil tankers show how connected ships can expose navigation and critical systems, threatening safety, ports and global trade. U.S. Coast Guard personnel and FBI agents boarded two Texas‑bound energy tankers last month after cyberattacks hit the vessels while they were underway, accord...