> TODAY'S SUMMARY (44 articles)
Today's cyber news highlights several critical threats and trends impacting security. A cyber incident at BAE Systems has disrupted U.S. federal bankruptcy court operations, indicating vulnerabilities in defense contractor systems. The FBI has issued a warning about scammers cloning candidate voices to steal personal and financial data ahead of the 2026 midterm elections. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical BeyondTrust flaw to its Known Exploited Vulnerabilities catalog, exploited by a suspected Chinese espionage group. Moreover, a data breach at CenterPoint Energy has compromised the personal information of over one million Texans. On the malware front, PEERSTITCH has been identified exploiting Fortinet vulnerabilities, demonstrating an ongoing trend of sophisticated attacks leveraging zero-day flaws.
|
// AI-powered summary generated at 12:00
IOActive works with manufacturer on issues with Smart Wi-Fi models
SMSVova can steal and relay a victim's location to an attacker in real time.
Admit it. Every now and then someone does something, and you think: “I also had that idea!” You feel validated — a kindred spirit has had the same intuitions, the same insights, and even drawn the same conclusions. I was reminded of this feeling recently when I came across a paper describing how to...
P2P-controlled malware blocks IoT device access to suspect ports
It infiltrates benign programs, hitching a ride to installation on users’ phones. Then it steals banking credentials and card details.
Break out your guayabera, it’s time for Infiltrate. Trail of Bits has attended every Infiltrate and has been a sponsor since 2015. The majority of the company will be in attendance this year (18 people!) and we’ll be swapping shirts and swag again. We’re looking forward to catching up with the lates...
On Monday holidays, alerts dip significantly, due to a lack of employees interacting with malicious emails, attachments and links.
There is a lot to learn from listening to our systems
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
Rights groups claim plans will undermine cybersecurity for those entering US
A dashboard shows relevant information, including the number of clients and how much money earned.
Franchises across the US and Puerto Rico affected
Only unpatched or unsupported Microsoft products affected
The flaw in its vCenter Server platform allows a remote attacker to execute arbitrary code and take control of a system.
Ostensibly, the idea is to prevent piracy. But the focus on security is also a bit of a blow to the “homebrew” community.
Cerber ransomware took over as top-dog (90% of all detections).
Australian ISP Melbourne IT has confirmed that it was hit by “a large DDoS attack” that disrupted its web hosting
New study claims over half haven’t been given any over past year
Philadelphia is an unsophisticated ransomware-as-a-service kit sold for a few hundred dollars to anyone who can afford it.
CGI claims FTSE100 firms could be down £120m on average