> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Cellebrite’s Matt Goeckel demos Genesis on a real enterprise case – UFDRs, CDRs, documents, audio and video – showing how agentic AI surfaces leads and timelines while linking every finding back to its source.
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek.
Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. [...]
More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.
Microsoft a corrigé le bug du copier-coller dans Excel 2016 à 2024. Sur Office 2016 et 2019, le collage peut encore échouer dans un cas bien précis.
Le post Bug copier-coller Excel : voici les correctifs pour Microsoft Office a été publié sur IT-Connect.
Why almost 90% of small companies have to deal with cyberincidents, and how to build a security setup without straining your budget or IT team.
Ghostscript could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in strongSwan.
Belgium’s national table tennis federation is investigating a cyberattack after a hacker claimed to have stolen data on tens of thousands of members.
Several security issues were fixed in ClamAV.
Memcached could be made to crash if it received specially crafted network traffic.
The Irish DPC found that Google users were unaware that their location was being used to influence them with ads
Microsoft has fixed a known issue that causes copy-and-paste failures for Excel users after installing the September 2026 security updates. [...]
Several security issues were fixed in libxml2.
Hackers captured a Flock camera and got a look (alternate link) at the software:
While much of the automatic license plate reader’s (ALPR) most sensitive storage remained encrypted and inaccessible, the joint analysis of the recovered data shows that software running on the device explicitly detects...
rsyslog could be made to crash if it received specially crafted network traffic.
Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic
Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be.
The post CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast appeared first on SecurityWeek.
Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks.
Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to imper...
Several security issues were fixed in the Linux kernel.