> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
Le système d'information interne de DR.WU Skincare a été victime d'une cyberattaque. L'entreprise a évalué que l'impact sur ses opérations n'est pas majeur. Après avoir détecté l'anomalie, elle a immédiatement activé son mécanisme de réponse aux incidents de sécurité et a isolé les systèmes concerné...
Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]
As the cyber scam industry expands globally, the U.S. government wants banks to share more information about what's happening to their customers.
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service, information disclosure, spoofing or bypass of access restrictions. For the stable distribution (trixie), these problems have been fixed in version 3.1.20-0+deb1...
Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore functionality. [...]
Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies.
The post Conti ransomware crew member sentenced to four years in prison appeared first on CyberScoop.
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.
The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek.
The Republican lawmaker called OpenAI’s leadership decisions “reckless,” and used recent warnings about the existential risk of AI to bolster his inquiry.
The post Hawley probes OpenAI over Hugging Face breach appeared first on CyberScoop.
War is peace. Freedom is slavery. Privacy is surveillance
Articles
Use Mobile VPN to securely access devices with internal management interfaces such as Dell iDRAC or HPE iLO
CyGlass Migration Tutorial for Partners
Certificate Validation Errors with GoDaddy Certificates After the R1 Root Certificate Transition
WatchGuard Firebox Performance Testing Overvi...
The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations.
The post AI lets small actors run state-level hacking campaigns, Anthropic report finds...
USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was
incomplete due to a missing library symbol, resulting in a regression
that could cause Apache HTTP Server to fail to start when HTTP/2
proxying was enabled. This update fixes the problem.
We apologize for the inconvenience.
Origi...
Several security issues were fixed in Python.
Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]
Bans Like California’s Don’t Fix What’s Wrong With Social Media Companies SAN FRANCISCO - Technology and the laws that regulate it should support and empower young people. California’s AB 1709 - signed into law today by Gov. Gavin Newsom - falls far short of this goal, say the Electronic Frontier Fo...
Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. [...]
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploite...