> TODAY'S SUMMARY (10 articles)
Key cybersecurity updates today include the sentencing of Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad cyberattacks, highlighting ongoing threats from state-sponsored hacking. A critical vulnerability in Drupal Commerce Core is being actively exploited, urging affected online stores to patch immediately. In another alarming trend, researchers have identified a malicious ChatGPT link that can execute code in users' sessions, potentially compromising private conversations. Additionally, Cloudflare reported a significant increase in DDoS attacks, with 18.2 million recorded in Q3, reflecting a 38% rise. On the software front, major releases of Wireshark and YARA-X have been announced, addressing various bug fixes and improvements.
|
// AI-powered summary generated at 12:00
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic.
SPONSORED FEATURE: AI makes phishing easier than ever
The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.
The post eMudhra kills its certificate business after researchers cracked its private keys in under a second appeared first on CyberScoop.
AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws before patches arrive. Attackers attempted to exploit two critical PHP vulnerabilities four days before the flaws became public, according to Amazon Threat Intelligence....
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
The post Hacker Conversations: Corey Thuen and the Evil Bit appeared first on SecurityWeek.
Create documents, code, and web pages with Lumo’s canvas. Everything stays protected with zero-access encryption.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
One in three people now tune out scam warnings, and scammers are counting on it.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to decrypt some customer secrets.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical....
The webkit2gtk update released as DSA-6534-1 introduced a regression that prevents Evolution from displaying images embedded in HTML emails. For the stable distribution (trixie), this problem has been fixed in version 2.54.0-1~deb13u3.
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.