> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]
As the cyber scam industry expands globally, the U.S. government wants banks to share more information about what's happening to their customers.
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service, information disclosure, spoofing or bypass of access restrictions. For the stable distribution (trixie), these problems have been fixed in version 3.1.20-0+deb1...
Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore functionality. [...]
Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies.
The post Conti ransomware crew member sentenced to four years in prison appeared first on CyberScoop.
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.
The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek.
The Republican lawmaker called OpenAI’s leadership decisions “reckless,” and used recent warnings about the existential risk of AI to bolster his inquiry.
The post Hawley probes OpenAI over Hugging Face breach appeared first on CyberScoop.
War is peace. Freedom is slavery. Privacy is surveillance
Articles
Use Mobile VPN to securely access devices with internal management interfaces such as Dell iDRAC or HPE iLO
CyGlass Migration Tutorial for Partners
Certificate Validation Errors with GoDaddy Certificates After the R1 Root Certificate Transition
WatchGuard Firebox Performance Testing Overvi...
The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations.
The post AI lets small actors run state-level hacking campaigns, Anthropic report finds...
USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was
incomplete due to a missing library symbol, resulting in a regression
that could cause Apache HTTP Server to fail to start when HTTP/2
proxying was enabled. This update fixes the problem.
We apologize for the inconvenience.
Origi...
Several security issues were fixed in Python.
Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]
Bans Like California’s Don’t Fix What’s Wrong With Social Media Companies SAN FRANCISCO - Technology and the laws that regulate it should support and empower young people. California’s AB 1709 - signed into law today by Gov. Gavin Newsom - falls far short of this goal, say the Electronic Frontier Fo...
Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. [...]
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploite...
Human operator: don't touch CIS orgs. AI agents: look a squirrel!
A notice dated September 4 but not widely shared shows that IDScan acknowledged a data breach but did not specify how many people were affected.
Ronzelle Green, most recently a senior official at the National Geospatial-Intelligence Agency, will be U.S. Cyber Command's chief AI officer.
In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.