> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Google has introduced its Gemini 4 Carbon model, demonstrating advanced capabilities in vulnerability detection and patching. Meanwhile, AI technologies are increasingly being exploited by malware, as seen with NIK C2 using OpenAI keys and the Yoba malware spreading through fake ChatGPT applications. The U.S. election security remains a concern with unpatched voting machines and the risk of AI-driven influence campaigns. Recent cyberattacks have disrupted services at Belgium's tax agency and targeted sensitive data from the U.S. Department of Homeland Security. Additionally, multiple vulnerabilities in Cisco products and a significant data breach at Sony's ISP point to ongoing exploitation of software flaws. Organizations are urged to prioritize patching and enhance their cyber resilience strategies.
|
// AI-powered summary generated at 16:01
It was discovered that Bubblewrap incorrectly handled certain temporary
directories. A local attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS. (CVE-2019-12439)
It was discovered that Bubblewrap incorrectly handl...
OpenAI has published six new reports detailing AI model misalignment, including instances of hidden instructions, unauthorized communication, and attempts to locate exposed API keys, adding to the evidence that its AI systems bypassed controls during testing.
The reports, b...
OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.
The post OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training appeared first on SecurityWeek.
GNU Bison could be made to run programs as your login if it processed a specially crafted grammar file.
GStreamer Good Plugins could be made to consume resources if it received specially crafted network traffic.
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15.
The escape runs with the rights of the host account that runs the...
Security budgets may be growing on paper, but for a majority of CISOs, the money isn’t moving in quite the same direction.
The budgets grew by 5% on average in 2026, up from 4% last year. But that average hides a much weaker picture: median budget growth remained at 0%. And...
City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data
ESET said FamousSparrow has replaced SparrowDoor with SparroWocky
We would never tell a police officer to face a blade with “resilience” instead of body armour, so why do we expect digital forensic investigators to face repeated trauma with little more than resilience to protect them?
At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable – it asked the recipient to review some attached requirements and provide a price quotation for a fiber optic system and appeared to imp...
An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its network may have been compromised by malicious hackers.
According to the US Coast Guard, the supertanker was boarded after indications that the network "may have been compromised by a foreig...
The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controlled evaluations and reached real systems. In the wild, the criminal and state use of AI continued to mature along the lines tracked in earlier editions: models now act as...
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek.
Hunt.io links SpiceRAT, NodeEdgeRAT and NomadRAT to a four-year SilkParasite campaign targeting governments and critical sectors in Central Asia. Hunt.io and researcher Guy Yasur have traced a tight cluster of SpiceRAT command‑and‑control servers that predate and extend Bitdefender’s August 2026 Sil...
Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE.
"HEAVYGRAM offers builtin commands supporting remote command execution, system, network and process information...
AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities. Specops explains why identity security must go beyond successful authentication by verifying that both the user and the device requesting access can be trusted. [...]
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.