> TODAY'S SUMMARY (141 articles)
Today's cybersecurity highlights include General Motors settling a $220 million lawsuit over the unauthorized sale of driver data, underscoring ongoing privacy concerns. Cisco is facing active exploitation of multiple zero-day vulnerabilities in its firewall products, emphasizing the urgent need for organizations to patch their systems. Meanwhile, a Chinese hacking group has been linked to the exploitation of vulnerabilities in VMware and Cisco systems, showcasing the sophistication and persistence of nation-state threats. Data exposure remains a significant issue, with over 484,000 cloud buckets containing sensitive information publicly accessible. Additionally, the University of New Mexico suffered disruptions from a ransomware attack that diverted ambulances and canceled surgeries, further illustrating the impact of cyberattacks on critical infrastructure.
|
// AI-powered summary generated at 20:00
The AWS European Sovereign Cloud is a new, independent cloud for Europe, physically and logically separate from existing AWS Regions and operated within the European Union (EU). It provides the same services, features, and APIs as AWS commercial Regions, but runs as a distinct AWS partition (aws-eus...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 1:140.16.0esr-1~deb13u1. We recommend that you upgrade your thunderbird packages.
“It's really complicated, and I wouldn't want to do something in a lame duck session to do it quickly and not get it right,” said House Energy and Commerce Chairman Brett Guthrie about the FRONTIER Act.
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users from logging in with valid domain credentials. [...]
Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. [...]
It’s the first guidance from the Cybersecurity and Infrastructure Security Agency on deploying decoys, like honeypots, to detect and distract adversaries.
The post CISA promotes a fresh way to deter cyberattackers: Lie to them appeared first on CyberScoop.
Lumen exposes BambooToken, a stealthy malware family using MQTT and sideloading to quietly infect targets across Asia and beyond. BambooToken is a new malware family that uses MQTT, a lightweight messaging protocol commonly found in smart devices and industrial systems, to quietly control infected W...
It was discovered that python-cryptography incorrectly accepted objects
with immutable buffers when performing certain cipher operations. This
would result in corrupted output, contrary to expectations. This issue only
affected Ubuntu 18.04 LTS. (CVE-2023-23931)
It was discovered that python-crypto...
A modern storefront can look healthy while malicious JavaScript quietly siphons revenue, hijacks clicks, or rewrites analytics. See how Cloudflare's machine learning models surface evasive client-side attacks for analyst investigation.
Microsoft’s top lawyer argued Tuesday that legislators “must make secrecy [orders] the exception” in government subpoenas demanding information about LinkedIn users.
LinkedIn, which is owned by Microsoft, is fighting what it calls overly broad subpoena demands from the US g...
ESET Endpoint Security for macOS version 10.0 is available for download.
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data. [...]
U.S. personnel boarded an oil tanker in the Gulf of Mexico to “ensure integrity of the vessel’s operational and information technology systems," after an apparent cyberattack, the U.S. Coast Guard said.
Earlier today, I noted an odd request showing up in our "First Seen" report:
A buffer overflow was found in the ODML parser of MKVToolNix, a set of command-line tools (and GUI) to work with Matroska files, which could potentially result in the execution of arbitrary code when processing malformed .mkv files. For the stable distribution (trixie), this problem has been fixed i...
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.12-0+deb13u2.
The Guarding Unprotected Aging Retirees from Deception Act (GUARD) attempts to address a common complaint from the victims of online scams like pig butchering — that such cases typically do not rise to the level of a federal investigation but local law enforcement is unequipped to properly investiga...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or privilege escalation. For the stable distribution (trixie), these problems have been fixed in version 140.16.0esr-1~deb13u1.
Several security issues were fixed in Perl.