> TODAY'S SUMMARY (5 articles)
Today's cybersecurity landscape highlights several critical threats. Three individuals have been charged for leveraging AI to impersonate CEOs and attorneys, resulting in a $129 million theft scheme targeting company accounting departments. Meanwhile, CERT-IN has reported a significant uptick in AI-driven attacks against Indian fintech firms, particularly during weekends when defenses are typically weaker. A critical vulnerability in OpenSSH allows remote attackers to bypass authentication on certain Linux systems, raising severe security concerns. Additionally, the FBI and CISA have issued warnings about cyberattacks targeting industrial refrigeration systems, posing risks of food spoilage and potential hazards. These incidents underline the increasing sophistication of cyber threats and the urgent need for enhanced security measures.
|
// AI-powered summary generated at 04:00
A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22.
The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not sh...
New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.”
Abstract: We discover a novel and surprising phenomenon of unintentional misalignment in reasoning language models (RLMs), which we call self-jailbreaking. Specifically, aft...
Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fast. Within months it had compromised more than 12,000 inboxes across over 10,000 organizations. Microsof...
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach The ShinyHunters extortion gang says it broke into FBI systems through a new, unpatched Oracle PeopleSoft zero-day. It claims it then moved into FBI-managed AWS GovCloud infrastructure and took 2 to 3TB of data on current and for...
The browser update resolves several critical-severity memory safety and memory corruption flaws.
The post Chrome 154 Patches 108 Vulnerabilities appeared first on SecurityWeek.
Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The company also confirmed that a pre-authentication remote code execution (RCE) vulnerability (CVE-2026-85102) in Check...
Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’s development for safety reasons.
The post A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk appeared first on SecurityWeek.
OpenAI has expanded GPT-6 with the GPT-6 Sol and GPT-6 Luna models. Both are available in ChatGPT Work and Codex for Plus, Pro, Business, Enterprise, and Edu users. Free and Go users can access GPT-6 Luna in the desktop app. The models are not yet available in Chat. OpenAI API users can access them...
Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees
Emerging from stealth with $16 million in pre-seed funding, Outerlimit offers a decentralized authorization layer designed to discover, observe, and block harmful autonomous AI actions.
The post Outerlimit Raises $16 Million to Stop Rogue AI Agents From Causing Harm appeared first on SecurityWeek.
Several security issues were fixed in Gzip.
Un pirate propose 10,69 millions de fiches de véhicules français. Volume, origine et authenticité restent à vérifier.
Le « deface » revient chez les vendeurs de données, utilisé comme preuve publique d’accès et de compromission.
WordPress released version 7.1.2 to fix a critical flaw that lets an unauthenticated attacker make the software load a PHP file of the attacker’s choosing from outside the site’s active theme folders. On sites where the server and the active theme meet certain conditions, the attacker can go on to r...
BigDiskBuster, la nouvelle faille zero-day de Nightmare Eclipse, sature le disque pour empĂŞcher Microsoft Defender de se mettre Ă jour sur Windows.
Le post BigDiskBuster : cette nouvelle zero-day empêche Microsoft Defender de se mettre à jour a été publié sur IT-Connect.
Information published.
The EvilTokens phishing service, which compromised more than 12,000 inboxes at over 10,000 organizations, has been disrupted by a coalition of law enforcement and private-sector partners led by Microsoft. With authorization from the US District Court for the Eastern District of Virginia, Microsoft a...
Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.
The post Arista Urges Immediate Patching of Exploited VCO Zero-Day appeared first on SecurityWeek.
The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents
Claude Opus 5.5 is available across Anthropic’s platforms, Amazon Web Services, Google Cloud and Microsoft Azure. Developers can access it through the Claude Platform using the model name claude-opus-5-5. It includes watermarking measures designed to comply with the EU AI Act. Built for long and com...