> TODAY'S SUMMARY (114 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A red-team report revealed OpenAI's insufficient monitoring during a Hugging Face attack, raising concerns about AI oversight. Microsoft Teams is set to introduce AI-powered phishing detection, enhancing security within its platform. The sophisticated BlackX UEFI bootkit has been identified, specifically targeting diplomatic organizations in Central Asia, demonstrating the increasing sophistication of supply chain attacks. Additionally, the PHP community is grappling with multiple critical remote code execution vulnerabilities, with emergency patches being issued for PHP2Shell as exploitation attempts surge. Meanwhile, Capcom confirmed a data breach affecting 11.7 million accounts, emphasizing the ongoing risks to personal data across industries.
|
// AI-powered summary generated at 20:00
L'autorité de protection des données de Lettonie, l'Inspection nationale des données (Datu valsts inspekcijas - DVI), a lancé une nouvelle section sur son site internet consacrée à la supervision de la loi sur l'intelligence artificielle.Cette nouvelle ressource a pour but d'aider le public, les ent...
Free Tracker Blocker Used by Millions Will Protect Even More Users' PrivacySAN FRANCISCO—Privacy Badger, the award-winning tracker blocker made by the member-supported digital rights nonprofit Electronic Frontier Foundation (EFF), is now available for Safari on macOS. Â
Safari users can download the...
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says a bug caused the issue.
Deepfake en entretien, voix clonée et faux service informatique : comment vérifier l'identité d'un utilisateur à l'ère de l'IA et sécuriser les accès.
Le post Deepfake, clonage vocal et vishing : comment être sûr de l’identité d’un utilisateur ? a été publié sur IT-Connect.
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK's platforms.
USN-8927-1 fixed vulnerabilities in curl. This update provides the
corresponding fixes for Ubuntu 26.10.
Original advisory details:
It was discovered that curl, when built with GnuTLS support, had an
out-of-bounds read in the WebSocket send path. An attacker could
possibly use this issue to obt...
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek.
Several security issues were fixed in OpenSSH.
cifs-utils could be made to run programs as an administrator.
The order cites national security concerns, including sending data to servers in China, the potential malware and the overall risk to federal IT systems.
The post DHS to ban DeepSeek from federal civilian agencies appeared first on CyberScoop.
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
The post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek.
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other states, has disclosed a data breach affecting more than 1 million Texas resid...
Several security issues were fixed in PHP.
Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.
Microsoft modifie le calendrier du SSPR et d’Entra Connect Sync : méthodes d’authentification exigées en novembre 2026, arrêt de la synchro en avril 2027.
Le post SSPR et Entra Connect Sync : Microsoft modifie le calendrier, les nouvelles dates à retenir a été publié sur IT-Connect.
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm