> TODAY'S SUMMARY (4 articles)
Today’s cybersecurity landscape highlights several critical threats. Researchers from Param have identified a vulnerability in ChatGPT where a malicious share link can execute code in a user's session, potentially exposing private chats. Meanwhile, Cloudflare reported a staggering 18.2 million network-layer DDoS attacks in Q3, an increase of 38%, averaging over 8,200 attacks per hour. Additionally, Microsoft has issued warnings regarding a malicious extension mimicking Claude Code, which establishes a persistent SSH backdoor for attackers. Organizations need to be vigilant in improving their defenses against these escalating threats.
|
// AI-powered summary generated at 08:00
It was discovered that nginx incorrectly handled certain configurations
using the alias directive together with rewrite rules. A remote attacker
could possibly use this issue to cause nginx to crash, resulting in a
denial of service, or execute arbitrary code.
(CVE-2026-15176)
It was discovered tha...
The Wordfence Threat Response Team is a new small, technically hands-on team responsible for turning rapidly emerging threats into customer protection and clear customer guidance. Spot an active threat? Report it directly to [email protected]
The post Introducing the Wordfence Threat Re...
Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to ste...
A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.
The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.
CERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized user accounts.
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.
The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek.
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can...
A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. [...]
Six Linux flaws were made public, including one with a working root exploit and no merged fix
A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States. [...]
The update process for an abandoned streaming app could let attackers take over PCs. If you ever used Popcorn Time, check your devices.
What Christopher Nolan’s The Odyssey can teach us about cybersecurity, and what risks watching the movie entails
It includes a review of whether its existing capabilities will meet its three pillars: “defend, harden, prevail.”
The post CISA publishes strategy with eye on the next four years appeared first on CyberScoop.
Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.
The post PHP2Shell Exploitation Moves From Probes to Working Shells appeared first on SecurityWeek.
Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes
The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so a pipeline written against an older script may need edits. Bu...
Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most often, made the list of top concerns for only a quarter of the 209 security professionals O’Re...