> TODAY'S SUMMARY (10 articles)
Key cybersecurity updates today include the sentencing of Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad cyberattacks, highlighting ongoing threats from state-sponsored hacking. A critical vulnerability in Drupal Commerce Core is being actively exploited, urging affected online stores to patch immediately. In another alarming trend, researchers have identified a malicious ChatGPT link that can execute code in users' sessions, potentially compromising private conversations. Additionally, Cloudflare reported a significant increase in DDoS attacks, with 18.2 million recorded in Q3, reflecting a 38% rise. On the software front, major releases of Wireshark and YARA-X have been announced, addressing various bug fixes and improvements.
|
// AI-powered summary generated at 12:00
Citizen Lab’s AdFection findings have senators pushing for industry improvements, while IAB Europe and Google defend their vetting practices.
The post Senators say targeted ads are a security risk. Ad groups say the critics are off base. appeared first on CyberScoop.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before.
That’s the dom...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. [...]
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica.
The action serves as a stark reminder to enterprises not to play fast and loose with data protec...
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
This public operational guidance for PHP2Shell is provided to customers and published for the benefit of the wider community.
CVE-2026-115560 : PHP signale une nouvelle faille RCE. Désactiver Session Upload Progress, déjà conseillé pour PHP2Shell, suffit en attendant le correctif.
Le post PHP signale une nouvelle faille RCE (CVE-2026-115560) : appliquez le même réglage que PHP2Shell a été publié sur IT-Connect.
Kaspersky email security solutions now include a technology that detects domains with auto-generated names.
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.
The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek.
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime co...
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls.
"Artifacts from this investigation also indicate that operators in this campaign have obtained access...
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go back to "business as usual".
Microsoft teste Project Pantheon, une mémoire IA pour Windows 11 qui ne retient que ce que vous sauvegardez, avec un serveur MCP ouvert à Claude et Cursor.
Le post Windows 11 : avec Project Pantheon, Microsoft teste une mémoire IA qui ne retient que ce que vous choisissez a été publié sur IT-Connect...
In an era of hybrid threats, the British government wants to update the Submarine Telegraph Act 1885, which carries a maximum fine of £1,000 and five years’ imprisonment in cases of deliberate damage.