> TODAY'S SUMMARY (17 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. The upcoming November 2026 Patch Tuesday is expected to address numerous CVEs, indicating ongoing vulnerabilities in older software systems.
2. A significant backdoor was discovered in Control Web Panel, enabling unauthorized command execution without logging, underscoring the risks in web server management tools.
3. Barracuda's Email Security Gateway was found to have exploitable flaws allowing root access without authentication, posing a major risk to email security.
4. New AI-driven scams have emerged, including a scheme where individuals impersonated CEOs to defraud companies of $129 million.
5. CERT-IN reported a rise in AI-powered attacks specifically targeting Indian fintechs during weekends, indicating a strategic shift by threat actors.
6. The FBI and CISA issued warnings about cyberattacks on industrial refrigeration systems, raising alarms about potential food safety and operational hazards.
|
// AI-powered summary generated at 08:00
The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise.
The post Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud appeared first on Cyb...
Used by crims to compromise 12K+ email inboxes across 10K+ global orgs
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). [...]
SPONSORED FEATURE: AI agents may be unpredictable. Who they are, what they can do, and who owns them shouldn’t be.
Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for en...
The Wordfence Threat Intelligence Team identified an interesting malware sample in mid June during a site clean. TThe malware was installed as a must-use plugin with several self-healing mechanisms in place in order to survive removal
The post Inside a Malicious, Stealthy WordPress Must Use Plugin a...
On Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow "GET" requests that include a body. The main reason for this was that GET requests typically do not contain a body. But what if they do?
Why hiding your Wi-Fi network name does more harm than good, and what actually does make your home network more secure.
The data security company received the new investment from Goldman Sachs Alternatives, extending its Series G funding round.
The post Cyera Raises $400 Million at $12+ Billion Valuation appeared first on SecurityWeek.
L’UNCyber recrute à Pontoise un expert en investigations numériques, forensique et sciences de la donnée.
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell
metacharacters in certain usernames. An attacker could possibly use this
issue to execute arbitrary commands when certain non-default
configurations were used, resulting in arbitrary code execution. This
issue only affected Ubuntu...
Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to
apply intercept policy checks when commands were executed under certain
circumstances. A local attacker permitted to run specific commands could
possibly use this issue to bypass policy enforcement and logging, executing
una...
Faux conseiller Google, badge payant et site cloné : une tentative de phishing cible les entreprises.
The researcher Chaotic Eclipse released BigDiskBuster, a PoC exploit for a Windows Defender Update DoS Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting Microsoft Defender. The r...
Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache when the variation is too unpredictable.
WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets
To help security practitioners catch malware that leans on AI, researchers from Cisco Talos shared an open-source framework that they hope will be used to classify and analyze the threat. The tool, called CAIRN, works entirely from metadata pulled off files. No downloading the malware, no running it...
Three domains / web portals belonging to Dutch academic publishing company Elsevier have been redirecting users to a page branded “LAPSUS$ GROUP, Chapter II,” carrying a signed statement that taunted the FBI and counted down to a future victim. According to Cloudskope researchers, the redirect ran f...
Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse.Â
The post Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity appeared first on SecurityWeek.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- PowerPC architecture;
- Compute Acceleration Framework;
- Driver...