> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Northflank has experienced a security breach, prompting customers to rotate their API keys due to unauthorized access. A new Android exploit, the "SMS of Death," has surfaced, allowing attackers to remotely crash unpatched devices. Chainalysis disclosed a breach involving customer data exposure, while a critical vulnerability in Drupal Commerce is being actively exploited. The number of DDoS attacks has surged, with Cloudflare reporting an increase of 38% in Q3. Meanwhile, malicious extensions and AI-driven infostealers like VOLTA are emerging as advanced threats, leveraging AI for victim profiling and data theft.
|
// AI-powered summary generated at 20:00
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Broadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately. Broadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to execute code on the...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
In short, WordPress security plugins are tools you add to your site to strengthen your settings, scan for malware, watch for file changes, and block suspicious activity from within WordPress. Most sites should use one, along with a firewall that filters traffic before WordPress even loads. Look for...
New libxml2 packages are available for Slackware 15.0 and -current to fix security issues.
​​​​​​​
L'organisme de certification GUTcert, basé à Berlin, a été victime d'une cyberattaque. L'attaque a débuté le 5 septembre 2026 et a permis à des attaquants d'accéder à des parties des systèmes informatiques de l'entreprise. Entre le 6 et le 9 septembre 2026, environ 640 Go de données ont été volés. L...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added a Google Chromium V8 flaw, tracked as CVE-2026-85046 (CVSS score of 8,8), to its Known Expl...
The letter follows revelations about Serbian student activists being infected with Pegasus and NoviSpy, and coincides with other pressures on Belgrade.
The post European parliament members call for slowdown of Serbia’s EU entry over spyware use appeared first on CyberScoop.
Looks tasty.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Blog moderation policy.
Phishers find a new use for invisible Unicode tag characters
As AI moves into customer-owned environments, organizations need new ways to verify the systems, software, and AI assets they trust before releasing sensitive data, credentials, and models.
The post How to secure edge AI in customer-owned environments appeared first on Microsoft Security Blog.
Manchester Airports Group (MAG) data allegedly leaked by FulcrumSec exposes emails and phone numbers of 8.8 million people. Manchester Airports Group, which operates Manchester, London Stansted and East Midlands airports, has confirmed a data breach involving customer information held in a third-par...
We’re pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider’s Audit Report (OSPAR) assessment on July 29, 2026, in line with the OSPAR version 2.0 framework. The Association of Banks in Singapore (ABS) established the Guidelines on Control O...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 1:140.15.0esr-1~deb13u1. We recommend that you upgrade your thunderbird packages.
Several security issues were fixed in the Linux kernel.