> TODAY'S SUMMARY (4 articles)
Today’s cybersecurity landscape highlights several critical threats. Researchers from Param have identified a vulnerability in ChatGPT where a malicious share link can execute code in a user's session, potentially exposing private chats. Meanwhile, Cloudflare reported a staggering 18.2 million network-layer DDoS attacks in Q3, an increase of 38%, averaging over 8,200 attacks per hour. Additionally, Microsoft has issued warnings regarding a malicious extension mimicking Claude Code, which establishes a persistent SSH backdoor for attackers. Organizations need to be vigilant in improving their defenses against these escalating threats.
|
// AI-powered summary generated at 08:00
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.
But there's not much evidence this is anything more than echoes of unsanitized training data
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for the alleged deception.
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal group has infected 953 online stores since July 2025, mostly Magento shops, according to Sansec researchers. The attackers add a small piece of cod...
A 'strong illustration of the risks associated with failing to rotate a potentially exposed key'
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.
The post Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI appeared first on SecurityWeek.
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.
According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by un...
Section 702 of the Foreign Intelligence Surveillance Act has lapsed, but another decision on its future nears, and the classified opinion could be decisive.
The post Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion appeared first on CyberScoop.
L'Office pour la protection des données personnelles tchèque (UOOÚ) a participé à une réunion de travail avec les délégués à la protection des données des autorités régionales afin de discuter de l'application pratique des règles de protection des données.La rencontre, qui s'est tenue le 19 octobre...
L'Autorité italienne de protection des données (Garante) a publié un guide de recommandations pour la protection des données personnelles à l'occasion de la fête d'Halloween.L'autorité met en garde contre la publication en ligne de photos et vidéos de mineurs en costume. Elle souligne les risques li...
Redmond joins growing list of software maintainers scrambling to patch compression flaw
L'Office de Protection des Données Personnelles polonais (UODO) a tenu une réunion avec des représentants des médias pour discuter de la création d'un code de conduite sectoriel visant à faciliter l'application du RGPD.À l'initiative des radios régionales de la Radio Polonaise, cette démarche vise à ...
L'autorité polonaise de protection des données (UODO) a sanctionné une association pour son absence totale de coopération, soulignant que le non-respect des pouvoirs d'enquête de l'autorité constitue une infraction distincte et sanctionnable, indépendamment du bien-fondé de l'affaire initiale.Faits...