> TODAY'S SUMMARY (82 articles)
Today's cybersecurity landscape features several critical incidents and emerging threats. Notably, Binance has fallen victim to a record-breaking $6.3 billion hack, attributed to North Korean hackers who compromised a DevOps engineer's laptop. Meanwhile, a malicious version of the Claude Code extension was distributed, potentially exposing 5,000 developers to SSH backdoors. Additionally, Drupal has reported a critical vulnerability in its Commerce Core module being actively exploited, urging immediate patching. California officials are investigating alleged election fraud, raising concerns about federal intrusion in state elections. Lastly, the ongoing PHP2Shell attacks target numerous systems, including Palo Alto firewalls, emphasizing the need for heightened vigilance against evolving cyber threats.
|
// AI-powered summary generated at 16:00
Claude's Felony Bench rap sheet is now as long as OpenAI's
When a chap called Matt noticed his Bluetooth headphones wouldn't switch to his phone, he was surprised to realise the reason was a single AliExpress webpage sitting open in his browser - playing nothing at all, at zero volume. And yet somehow his hardware could hear it. Audio fingerprinting is one...
Mind the patch gap, please and thank you
The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography. This marks the opening test build for a version still months from general availability. The...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Google is aware that an exploit for CVE-2026-85046 exists in the wild.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms.
The post Threat matrix: Mapping threats across cloud web applications appeared firs...
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. [...]
CISA's cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says.
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen.
The post Chinese espionage groups swarm to exploit triple-link chain of zero-days appeared first on CyberScoop.
The City Attorney’s Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company claims the ads are not under the city’s jurisdiction.
The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from nearby unpaired devices without requiring user interaction. [...]
Summary U.S. authorities have sanctioned Xinbi Guarantee, a major Chinese-language illicit marketplace that connects criminal networks with money laundering, scam…
The post OFAC and DOJ Strike Xinbi, a Multibillion-Dollar Marketplace for Cybercriminals appeared first on Chainalysis.
Summary Purported white-hat hackers exploited the Liquid Network to withdraw $320 million in BTC from the network’s reserve. A vulnerability…
The post How The $320M Exploit of Liquid Network Went Down appeared first on Chainalysis.
Law enforcement agencies across the country are increasingly relying on spying technologies—automated license plate readers (ALPR), cell-site simulators, and facial recognition, to name a few--causing an outcry in many communities where people are rightly concerned about the threat to civil rights a...
Networking gear manufacturer MikroTik has released patches for six vulnerabilities in its RouterOS firmware, two of which can be chained together to take over devices without authentication over SSH. The exploit chain, dubbed MikroTrick, is already being used by attackers in t...
The U.S. government also carried out a seizure of $52.8 million from 52 wallets connected to the platform.