> TODAY'S SUMMARY (18 articles)
Today's cybersecurity news highlights various significant threats and trends:
1. **AI-Generated Code Concerns**: Proton's CEO downplays security testing for AI-written code, raising concerns about potential vulnerabilities in software development.
2. **Data Breach at DHS**: A hacker leaked personal data of over 40,000 Department of Homeland Security employees, underscoring the ongoing risks of data breaches in government sectors.
3. **Fake IT Scams**: Attackers impersonating IT support managed to manipulate employees into granting remote access, revealing the effectiveness of social engineering tactics.
4. **Cryptocurrency Exchange Breach**: Binance experienced a significant security incident affecting $6.3 billion in assets, highlighting vulnerabilities in cryptocurrency platforms amid increasing cyber threats.
5. **Scammers Adapt Quickly**: Fraudulent online shopping sites are being rapidly re-established after takedowns, indicating persistent challenges in combating e-commerce scams.
6. **IoT Device Risks**: A recent report identifies smart TVs as major targets for cyber vulnerabilities, emphasizing the need for security measures in household IoT devices.
|
// AI-powered summary generated at 08:00
A threat actor built a working exploit for PaperCut print management software, then handed the job of breaking into hundreds of organizations to AI agents that did most of the work on their own, according to GreyNoise. The result was at least 440 compromised PaperCut instances across 395 identified...
Attackers are using passkey-themed social engineering to trick employees into giving them access to their Microsoft accounts.
Microsoft Security Research said it has been tracking active cloud intrusions since May in which attackers impersonated IT helpdesk staff, told empl...
A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.
The post Surfshark Systems Targeted by Hackers appeared first on SecurityWeek.
Microsoft has fixed a bug that prevented Teams and Outlook from launching on ARM-based Windows devices after installing updates released since the August 2026 Patch Tuesday. [...]
A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so
The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to human and drug trafficking.
Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model.
The post Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion appeared first on SecurityWeek.
Information published.
Information published.
Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers accessed customer data stored on its cloud platform. The Louisiana-based firm, which processes ID checks for car rental companies, ret...
Google’s Early Access program is meant to give developers a place to release unfinished apps, gather feedback and handle bugs before a full launch.
But new research from Bitdefender Labs suggests the feature may also be giving potentially deceptive applications an unusual a...
A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide.
The post PaperCut Flaws Exploited in AI-Powered Attacks appeared first on SecurityWeek.
Kiteworks has acquired Bonfy.AI, extending runtime data governance across its control plane. The acquisition enables organizations to govern data exchanges as they happen, whether initiated by a person, machine, or autonomous agent. The acquisition addresses a structural gap in how enterprises prote...
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link. [...]
Automox has announced its AI-speed Mitigation Worklet Pipeline, which automates mitigation to reduce risk from the increased volume and velocity of frontier-model AI vulnerabilities. Now the time from vulnerability disclosure to exposure mitigation is shortened from days or weeks to minutes or hours...
Analysez la MFT du système de fichiers NTFS de Windows : extraction de $MFT avec KAPE, conversion en CSV avec MFTECmd et recherche de fichiers supprimés.
Le post Forensic Windows – Partie 11 : analyser la MFT avec KAPE et MFTECmd a été publié sur IT-Connect.
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report.
Wiz saw the attacks between August 15 and September 8. JFrog had fixe...
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security company Gen Digital said in research published Thursday.
The attack started with a crafted link and...
A critical SonicWall flaw was rapidly weaponized, with a UK Council attack linked to a campaign that exposed credentials and enabled Active Directory theft. On July 17, 2026, the Borough Council of King’s Lynn and West Norfolk announced it had detected a cyberattack affecting council services. Hunt....
Several vulnerabilities were discovered in libevent, an asynchronous event notification library. The HTTP implementation (evhttp) handled Transfer-Encoding and Content-Length headers, chunked-encoding line terminators, header line folding and chunked trailers too permissively, which could allow HTTP