> TODAY'S SUMMARY (114 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A red-team report revealed OpenAI's insufficient monitoring during a Hugging Face attack, raising concerns about AI oversight. Microsoft Teams is set to introduce AI-powered phishing detection, enhancing security within its platform. The sophisticated BlackX UEFI bootkit has been identified, specifically targeting diplomatic organizations in Central Asia, demonstrating the increasing sophistication of supply chain attacks. Additionally, the PHP community is grappling with multiple critical remote code execution vulnerabilities, with emergency patches being issued for PHP2Shell as exploitation attempts surge. Meanwhile, Capcom confirmed a data breach affecting 11.7 million accounts, emphasizing the ongoing risks to personal data across industries.
|
// AI-powered summary generated at 20:00
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in version 4.20.4+39-gf1e1321c87-0+deb13u1.
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can aut...
Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".
Two vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 3.0.11-1+deb13u4. We recommend that you upgrade your haproxy packages.
The update for cifs-utils announced in DSA 6567-1 introduced a regression when using the sec=krb5 and cruid mount options. Updated packages are now available to correct this issue. For the stable distribution (trixie), this problem has been fixed in version 2:7.4-1+deb13u2.
CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign distributing a remote access trojan called CikaBika Bot, written in Rust and controlled entirely throug...
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
The post US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars appeared first on SecurityWeek.
La Chine veut encadrer les exportations de 23 technologies d’IA, sur fond de rivalité stratégique avec Washington.
FFTir : un pirate vend 40 Go de données, dont des photos et certificats médicaux de licenciés sportifs.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime  AI models may be capable of self-replicating without acces...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean IT Workers Used Stolen US Identities to...
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
The disabled identities are liste...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already do...
In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking detail...
Drive Specifications Matter (Complete)
Loxone, une entreprise autrichienne de technologie pour l'automatisation de bâtiments, a confirmé avoir été victime d'une cyberattaque sur ses systèmes internes le 18 octobre 2026. L'attaque semble être de type rançongiciel (ransomware), avec des menaces de publication de données exfiltrées (environ...
New libXtst packages are available for Slackware 15.0 and -current to fix security issues.
Following ConnectWise’s disclosure of unauthorized access to its Cloud Backup app on 16 October, our SOC has been reviewing customer environments and helping partners contain exposure.
If you use ConnectWise Cloud Backup with Microsoft 365, we recommend:
âś… Disable the affected ConnectWise enterpris...
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American...