> TODAY'S SUMMARY (141 articles)
Today's cybersecurity highlights include General Motors settling a $220 million lawsuit over the unauthorized sale of driver data, underscoring ongoing privacy concerns. Cisco is facing active exploitation of multiple zero-day vulnerabilities in its firewall products, emphasizing the urgent need for organizations to patch their systems. Meanwhile, a Chinese hacking group has been linked to the exploitation of vulnerabilities in VMware and Cisco systems, showcasing the sophistication and persistence of nation-state threats. Data exposure remains a significant issue, with over 484,000 cloud buckets containing sensitive information publicly accessible. Additionally, the University of New Mexico suffered disruptions from a ransomware attack that diverted ambulances and canceled surgeries, further illustrating the impact of cyberattacks on critical infrastructure.
|
// AI-powered summary generated at 20:00
Mass surveillance isn't a joke. But police are treating it like one when using automated license plate reader (ALPR) networks. In our latest EFFector newsletter, we're covering a new EFF report on how officers across the country are routinely logging completely nonsensical "reasons" for their Flock...
A growing divide among leading AI companies over how to secure increasingly powerful models is beginning to translate into challenges for enterprise IT, with implications for how organizations access, deploy, and govern AI systems.
The latest flashpoint came after Meta CEO...
Since its integration into our digital world, social media has played a pivotal role in youth organizing and social mobilization. Yet, peopleâs access to these platforms is increasingly coming under threat from courts and legislatures under the guise of protecting young people onlineâpresenting a si...
Oracleâs September 2026 Critical Security Patch Update has arrived with 673 new security patches spanning 17 Oracle product families, with Oracle E-Business Suite accounting for the largest share at 159 patches, followed by Fusion Middleware with 153. Of these, 19 E-Business S...
A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation.
The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote at...
A website used around the world for reporting meteors faces weeks of downtime as the organization moves away from systems that were hacked recently.
AI agentsâ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike.
âProtecting Tokens and Assertions from Forgery, Thef...
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky.
The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to...
Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells
Passware Kit now supports password recovery and decryption for Steganos Data Safe v.15 and later, including newer .SHEADER vaults and additional protection options such as 2FA, Emergency Passwords, and USB-stored keys.
The agencies issued a joint statement saying the âjoint security boardingsâ came in response to âindications that the networks of both vessels were compromised.â
The post Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks appeared first on CyberScoop.
The Pixel phone maker said there are indications that a bug in the phone's modem "may be under limited, targeted exploitation."
USN-8736-1 fixed vulnerabilities in Perl. This update provides the
corresponding fix for Perl on Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that Perl incorrectly handled certain large inputs during
regular expression matching. An attacker could possibly use this issue to
trigge...
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension.
Once the extension was ins...
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
The post Virtual Event Today: Attack Surface Management Summit appeared first on SecurityWeek.
Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, authorities said.
Ursula von der Leyen warns that advanced AI could unleash hacking on an unprecedented scale as Europe prepares new protections against social mediaâs âcaptureâ of children.
The post EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media appeared first on SecurityWeek.
The secretary told House Financial Services Committee lawmakers that the âbest way to guarantee safetyâ is for AI creators to be held âliable for what they build and generate.â
The post Treasuryâs Scott Bessent says no liability exemptions for AI labs appeared first on CyberScoop.
The ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can reduce downtime and provide a faster, more predictable path to recovery. [...]
CISA and NIST issued final guidance to help protect cloud identity tokens and assertions