> TODAY'S SUMMARY (130 articles)
Today's cyber news highlights several significant threats and trends. The largest cryptocurrency heist in history occurred as North Korean hackers stole approximately $6.3 billion from Binance by exploiting a compromised DevOps laptop. In retail, fashion retailer Resolve reported the theft of customer payment card information due to a security breach. Additionally, a malicious update to the Claude Code extension for VS Code was found to have installed persistent SSH backdoors on developers' machines. Exploits targeting critical vulnerabilities in Drupal and GitLab are actively being leveraged by attackers, raising concerns about web security. Lastly, hackers published sensitive data of over 41,000 DHS employees, emphasizing the ongoing risks to government cybersecurity.
|
// AI-powered summary generated at 20:00
A monthly review of Australian and New Zealand cyber security incidents, data breaches, privacy reform, AI governance developments, audit findings, scams, and regulatory updates for August 2026.
The post Australian Cyber Aware – As It Was 2608 – August 2026 appeared first on Australian Cyber Aware.
The open source cleaner BleachBit reached version 6.0.4 this week, erasing caches, browser traces, and files on Windows, Linux, and now macOS. If you shredded a sensitive file on Windows with an earlier build, parts of it may still sit on the disk where the wipe missed. Fragmentation is the ordinary...
Possibly wormable bugs and two zero-day holes highlight the almost 1,000 fixes issued today by Microsoft in its September Patch Tuesday release.
The 964 vulnerabilities, another record since Microsoft began using AI in the middle of the year to find holes, require customer...
Several vulnerabilities were discovered in the Slurm Workload Manager, a cluster resource management and job scheduling system, which may result in privilege escalation, SQL injection in the accounting database, deletion of files outside the container spool directory, bypass of credential verificati...
Cisco is looking to get ahead of attackers with a new set of more than a half-dozen fixes, some of them critical, for its IOS XR Linux-based network operating system (OS).
As part of its regular testing, Cisco’s software engineering team flagged “multiple internally-discove...
Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, or adult without exposing their exact date of birth. [...]
Adobe also brought goodies to the patch party and they deserve immediate attention
Several security issues were fixed in FFmpeg.
Vim could be made to crash or run programs as your login if it opened a specially crafted file.
Le centre de données de l'État du Bengale-Occidental a subi une cyberattaque pendant cinq jours, du 9 au 13 septembre. Des experts soupçonnent que des données importantes de plusieurs départements gouvernementaux, y compris le ministère des Finances, ont été volées ou détruites. Les services en lign...
curl could be made to expose sensitive information.
Several security issues were fixed in ImageMagick.
Le Port de Tanjung Pelepas a confirmé avoir subi un incident de cybersécurité qui a affecté ses systèmes d'exploitation et a temporairement interrompu les opérations du terminal à conteneurs. Un redémarrage progressif a commencé le 10 septembre.
The realities of quantum computing and its inevitable impact on enterprise cryptography are already taking shape:Red Hat Enterprise Linux has been post-quantum cryptographically (PQC)-capable since the launch of Red Hat Enterprise Linux 10 (RHEL) in 2025.Hyperscalers like AWS and Google Cloud Platfo...
We’ve been talking with business leaders about Lightwell for the past few months, and the conversation always starts with enthusiasm. AI-driven exploits are moving at unprecedented speeds, and enterprise security teams are feeling a level of urgency we haven’t seen in decades. When organizations dis...
La mairie du Tampon est victime d'une cyberattaque depuis mercredi matin, entraînant d'importantes perturbations et empêchant la collectivité d'assurer ses missions dans des conditions normales.
De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.
Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer un déni de service à distance.
While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific areas of risk and exposure.
The post Microsoft discloses two actively exploited zero-days among 974 vulnerabilities appeared first on CyberScoop.