> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.
The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE i...
The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone system and hasn’t impacted critical operations.
The post ATF confirms cyberattack hit system containing info on its investigation targets appeared first on CyberScoop.
Love Electric’s alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A seller on an English-language data-breach forum claimed on August 26 that they had obtained the driver database of Love Electric, a UK broker that...
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]
Organizations in regulated industries such as financial services, government, defense, and healthcare restrict their sensitive workloads to isolated network environments with no access to the public internet. Until now, customers could restrict AWS Management Console access to authorized AWS account...
Hardware security researchers from University of Toronto have developed a new memory bit flipping technique that significantly improves on previously known attacks against GPU memory. The new method can defeat the error-correcting codes (ECC) defense used on enterprise Nvidia...
Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money, fueling a wave of complaints.
A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]
Trump targets foreign-made power grid equipment, citing cyber, sabotage and supply-chain risks to U.S. national security. Executive Order 14420, signed on August 26, targets equipment and technologies that could expose the power grid to sabotage, unauthorized access, malicious remote activity or sup...
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening.
"This vulnerability gives an unauthenticated attacker remote control over PaperCut's trust...
Disk images, atypical Office files, vector graphics, polyglots, and other techniques for covertly launching malware, as seen in real-world cyberattacks.
La Cour administrative suprême de Pologne a confirmé la décision de l'autorité polonaise de protection des données (UODO) sanctionnant une coopérative de logement pour ne pas avoir notifié une violation de données. Cette décision finale clarifie que la divulgation de données d'identité et d'adresse...
L'Autorité néerlandaise des données personnelles (AP) rendra obligatoire la publication des sanctions relatives au RGPD à compter du 1er septembre 2026, suite à une modification législative.Cette nouvelle obligation légale, issue d'un amendement à la Loi d'application du Règlement général sur la pro...
A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Television) service that generated £980,812 ($1.3 million) over three years. [...]
L'autorité espagnole de protection des données (AEPD) a sanctionné une entreprise pour son système de vidéosurveillance, jugeant que l'information fournie aux salariés était insuffisante et que les panneaux d'information étaient incomplets, en violation de l'obligation de transparence.Faits et conte...
L'Autorité de protection des données islandaise (Personuvernd) a publié un rappel à l'attention des mouvements politiques et des parties prenantes sur les règles encadrant l'utilisation des données personnelles dans le contexte d'un référendum.Faisant suite à des signalements concernant des communic...
PaperCut released an emergency advisory on Thursday evening saying vulnerabilities in their print management software, PaperCut NG and MF, are under active exploitation.
L'autorité de protection des données islandaise, la Persónuvernd, a publié un avertissement concernant des tentatives de fraude consécutives à une fuite de données sur le site Booking.com.L'autorité a été informée de tentatives d'escroquerie visant les utilisateurs de la plateforme. Celles-ci consis...
L'Autorité de protection des données néerlandaise (AP) a émis des recommandations à l'attention des utilisateurs de WordPress suite à la découverte de vulnérabilités activement exploitées.L'autorité a constaté que des failles dans le logiciel WordPress sont actuellement exploitées, entraînant des vi...
Un professionnel des bijoux en diamants piraté. 690 000 clients et leurs données potentiellement impactés.