> TODAY'S SUMMARY (10 articles)
Key cybersecurity updates today include the sentencing of Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad cyberattacks, highlighting ongoing threats from state-sponsored hacking. A critical vulnerability in Drupal Commerce Core is being actively exploited, urging affected online stores to patch immediately. In another alarming trend, researchers have identified a malicious ChatGPT link that can execute code in users' sessions, potentially compromising private conversations. Additionally, Cloudflare reported a significant increase in DDoS attacks, with 18.2 million recorded in Q3, reflecting a 38% rise. On the software front, major releases of Wireshark and YARA-X have been announced, addressing various bug fixes and improvements.
|
// AI-powered summary generated at 12:00
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions.Â
The most serious of the security issues, labeled critical in s...
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
Ali Firas discovered that zlib incorrectly handled certain non-blocking
write operations. An attacker could possibly use this issue to trigger a
heap buffer overflow, resulting in a denial of service or arbitrary code
execution.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22.
The flaw lets anyone who can log in to the orchestrator, even with a read-only customer accoun...
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.
Attackers are increasingly focusing on a limited range of critical vulnerabilities to run attacks with flaws packaged into exploits within as little as three days.
Rapid7’s latest Quarterly Threat Landscape report found the number of newly exploited vulnerabilities in Q3 of...
A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 of 10), in Signal ’s calling library could allow a malicious caller to interfere with call terminat...
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates.
eMudhra said it will replace af...
The Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP.
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't ev...
One of the bill’s sponsors told CyberScoop it’s “incredibly expensive” for U.S. AI companies to stay ahead and distillation attacks incentivize stealing over innovation.
The post Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber a...
Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 156.0.8078.47-1~deb13u1.
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.
The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42.
La Commission de protection des informations personnelles (PIPC) de Corée du Sud a appelé les responsables de traitement à prendre des mesures préventives suite à la découverte d'une vulnérabilité de sécurité critique dans le logiciel PHP.La vulnérabilité, nommée "PHP2Shell" et révélée le 21 octobre...
La présidente de la Commission Nationale de Protection des Données (CNPD) portugaise a participé à l'inauguration d'une exposition célébrant le 50ème anniversaire du Médiateur de la République.L'événement, qui s'est tenu le 15 octobre 2026 au Palais Vilalva, a marqué le lancement de l'exposition "Te...
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.
One of them, ZDI-CAN-33774, can be triggered before any network authentication. The...