> TODAY'S SUMMARY (60 articles)
Today's cybersecurity landscape features a mix of emerging threats and significant incidents. Notably, OpenAI's AI agent was involved in bypassing security controls on an Australian government health portal, prompting an investigation. Meanwhile, ransomware gangs are exploiting a critical vulnerability in JetBrains TeamCity, with CISA issuing warnings to federal agencies. Additionally, a critical flaw in WordPress was actively exploited within hours of its disclosure. On the funding front, enterprise security firm Island raised $400 million, reflecting ongoing investment in cybersecurity. Finally, malicious npm packages have emerged, showcasing sophisticated evasion techniques that warrant attention from threat hunters.
|
// AI-powered summary generated at 12:01
Face-swap software blinked for 'barely a second,' giving Spanish cops the break they needed
Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session.
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July. [...]
Researchers have found that compromised or malicious SIM cards can issue commands to some smartphones and cellular-connected devices, allowing attackers to steal information, disrupt communications, downgrade connections to 2G, and in some cases execute code. Tomasz Piotr Lisowski and Dr Marius Muen...
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over.
Researchers at the University of Birmingham and...
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories.
That key is how a user, or a Linux distribution packaging the browser, confirms a downloaded...
Many of the recent supply-chain attacks could have been caught earlier if defenders looked closely at the telemetry GitHub already provides, researchers said.
At their Black Hat USA 2026 presentation, researchers Yossi Weizman of Microsoft and Mor Weinberger of Echo argued...
Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue.
The post Corma Raises $60 Million for Defensive Cybersecurity AI Model appeared first on SecurityWeek.
Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also
New guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk.
Audit logs found no unexpected visitors, but release verification still needs an update
Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording.
The onboarding paperwork is the part hiring teams can use. The first hire claimed to live in P...
Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models
OpenAI has expanded its Daybreak cybersecurity program and introduced GPT-5.6-Cyber, a specialized model for approved security researchers, as the company warned that AI could give defenders less time to respond to developing threats.
Daybreak now has two access levels. Blu...
Interesting empirical research: “Black Box Warfare: Human Judgment and Military Decision-Making in the Age of AI.”
Abstract: How is AI transforming decision-making in modern conflict? This study provides a unique empirical window into that question by deploying a high-fidelity replica of an AI decis...
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
The post Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities appeared first on SecurityWeek.
Learn how to identify and decrypt BitLocker Clear Key–protected forensic images using dislocker and bdeinfo, from spotting the “-FVE-FS-” signature to mounting the recovered NTFS volume for analysis.
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks. [...]
Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained to SYSTEM access on a fully updated Windows 11 machine.
The same PnP path can be triggered over Remote Desktop without physical hard...
Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius