> TODAY'S SUMMARY (114 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A red-team report revealed OpenAI's insufficient monitoring during a Hugging Face attack, raising concerns about AI oversight. Microsoft Teams is set to introduce AI-powered phishing detection, enhancing security within its platform. The sophisticated BlackX UEFI bootkit has been identified, specifically targeting diplomatic organizations in Central Asia, demonstrating the increasing sophistication of supply chain attacks. Additionally, the PHP community is grappling with multiple critical remote code execution vulnerabilities, with emergency patches being issued for PHP2Shell as exploitation attempts surge. Meanwhile, Capcom confirmed a data breach affecting 11.7 million accounts, emphasizing the ongoing risks to personal data across industries.
|
// AI-powered summary generated at 20:00
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
This week had plenty of that. Trusted connections became a p...
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts. [...]
Depuis les mises Ă jour Windows Server d'octobre 2026, certains serveurs Exchange bloquent OWA et l'envoi des e-mails. Voici le contournement de Microsoft.
Le post Exchange Server : les mises à jour d’octobre 2026 de Windows Server bloquent OWA et l’envoi des e-mails a été publié sur IT-Connect.
It was discovered that cifs-utils incorrectly handled credentials files
used by privileged mount.cifs invocations. A local attacker could
possibly use this issue to inject arbitrary mount options into a
privileged mount, resulting in a privilege escalation.
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. [...]
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources c...
Axonius has announced Axonius AI Workforce, the latest expansion of Axonius AI. It enables organizations to deploy teams of Virtual Workers that monitor their environments, identify high-risk exposures and assets that deviate from their expected state, remediate issues, and report progress toward as...
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise Cloud Backup application, fo...
Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that matters to every company advertising or selling through its platforms. The new language takes effect on Oct...
A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent f...
Clé oubliée, éditeur piraté, porte dérobée déposée à distance : le récit de l’attaque d’IT-Connect et les vérifications à faire sur votre site WordPress.
Le post UpdraftPlus : comment une porte dérobée a été installée sur IT-Connect via UpdraftCentral a été publié sur IT-Connect.
The services remain unavailable as the company continues remediation and security validation.
The post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first on SecurityWeek.
Several security issues were fixed in Go.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.
The latest evolution, detailed by OpenSourceMalware...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously.
The post Agents are your newest insiders. Security must move at their speed. appeared first on Microsoft Security Blog.