> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]
Second security snafu in two years
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database contained connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, along with customer accou...
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing enough information.
ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed such access on Saturday.
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]
When our AI code reviewer's cost per run doubled, we dug into the token usage to find out why. Learn how we used prompt caching and intelligent model routing to slash our inference bill by 68% while speeding up reviews.
Several security issues were fixed in curl.
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in the lead-up to Serbia's national elections.
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media available across devices. But when a server is exposed to the internet and runs vulnerable software, it c...
At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others.
The post Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic appeared first on CyberScoop.
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Several security issues were fixed in libXtst.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek.