> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users from logging in with valid domain credentials. [...]
Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. [...]
Itâs the first guidance from the Cybersecurity and Infrastructure Security Agency on deploying decoys, like honeypots, to detect and distract adversaries.
The post CISA promotes a fresh way to deter cyberattackers: Lie to them appeared first on CyberScoop.
Lumen exposes BambooToken, a stealthy malware family using MQTT and sideloading to quietly infect targets across Asia and beyond. BambooToken is a new malware family that uses MQTT, a lightweight messaging protocol commonly found in smart devices and industrial systems, to quietly control infected W...
It was discovered that python-cryptography incorrectly accepted objects
with immutable buffers when performing certain cipher operations. This
would result in corrupted output, contrary to expectations. This issue only
affected Ubuntu 18.04 LTS. (CVE-2023-23931)
It was discovered that python-crypto...
A modern storefront can look healthy while malicious JavaScript quietly siphons revenue, hijacks clicks, or rewrites analytics. See how Cloudflare's machine learning models surface evasive client-side attacks for analyst investigation.
Microsoftâs top lawyer argued Tuesday that legislators âmust make secrecy [orders] the exceptionâ in government subpoenas demanding information about LinkedIn users.
LinkedIn, which is owned by Microsoft, is fighting what it calls overly broad subpoena demands from the US g...
ESET Endpoint Security for macOS version 10.0 is available for download.
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data. [...]
U.S. personnel boarded an oil tanker in the Gulf of Mexico to âensure integrity of the vesselâs operational and information technology systems," after an apparent cyberattack, the U.S. Coast Guard said.
Earlier today, I noted an odd request showing up in our "First Seen" report:
A buffer overflow was found in the ODML parser of MKVToolNix, a set of command-line tools (and GUI) to work with Matroska files, which could potentially result in the execution of arbitrary code when processing malformed .mkv files. For the stable distribution (trixie), this problem has been fixed i...
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.12-0+deb13u2.
The Guarding Unprotected Aging Retirees from Deception Act (GUARD) attempts to address a common complaint from the victims of online scams like pig butchering â that such cases typically do not rise to the level of a federal investigation but local law enforcement is unequipped to properly investiga...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or privilege escalation. For the stable distribution (trixie), these problems have been fixed in version 140.16.0esr-1~deb13u1.
Several security issues were fixed in Perl.
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides...
The ShinyHunters gang leaked the files online after saying the Florida state agency did not pay their ransom demand.
CISA gives federal agencies just 3 days to patch