> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights significant threats, notably the FBI's attribution of the record $6.3 billion Binance crypto heist to North Korean hackers, known as TraderTraitor. This breach underscores the ongoing risk posed by state-sponsored cybercriminals in the cryptocurrency sector. Additionally, a new vulnerability in Android, dubbed "SMS of Death," allows attackers to crash call services through a hidden message, posing a severe risk to users. In other news, hackers exploited a critical flaw in Canonical's LXD, enabling unauthorized logins as trusted clients. Furthermore, malicious code on Polymarket's website led to the theft of approximately $2.7 million from traders, showcasing vulnerabilities in online platforms. Lastly, a sophisticated malware campaign targeting government systems in Asia has been identified, underscoring the evolving nature of cyber threats.
|
// AI-powered summary generated at 20:00
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Siebe Devroe, HĂ©loĂŻse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Des fuites de données aux home-jackings, comment des informations volées peuvent devenir un outil de ciblage criminel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- File systems infrastructure;
- OCFS2 file system;
- B.A.T.M.A.N. meshing protocol;
- SCTP protocol;
- TIPC p...
New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unauthorized message board. [...]
Siebe Devroe, HĂ©loĂŻse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Open vSwitch;
- SCTP protocol;
(CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
It's 'built to be operated by a human with no technical background'
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- Open vSwitch;
- SCTP protocol;
(CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-6453...
Dark Caracal targets Venezuela with GoCaracal, an upgraded Bandook toolkit and an Ethereum fallback for resilient C2 communications. Dark Caracal is back with new malware and the same hunting grounds. Arctic Wolf Labs researchers link a June 2026 intrusion against a communications organisation in Ve...
The Trump administration is banning the acquisition of foreign-made components used to manage electricity and power, alleging that “certain foreign actors are increasingly creating and exploiting vulnerabilities” in the technology.
When you create an AI agent that makes a breakthrough that is so difficult to understand that you need to ask it to write a blog post to explain it to you, you know you’re on to something.
The post Wordfence Argus: Moving Beyond Human Research Capability appeared first on Wordfence.
Juthawong Naisanguansee discovered that PAM incorrectly cleared failed
login attempt records when certain services invoked the account phase
without first performing authentication. An attacker could possibly use
this issue to reset failed login counters, resulting in authentication
lockout restrict...
Une fuite de données massive, concernant plus de 1,17 million de dossiers d'enfants disparus et de personnes adoptées, a été causée par une gestion défaillante de supports de stockage amovibles par un organisme public. L'absence de chiffrement des données et le manquement aux obligations de notifica...
Une société commercialisant des dispositifs de blocage d'appels a été sanctionnée pour avoir elle-même réalisé des campagnes massives de démarchage téléphonique illicite, en ciblant spécifiquement des personnes âgées et vulnérables inscrites sur une liste d'opposition.Faits et contexteL'autorité de...
Even testing and staging sites need protection from prying eyes
Une violation de données résultant d'une vulnérabilité non corrigée sur un serveur et d'une absence de cloisonnement réseau entre deux sociétés d'un même groupe a conduit l'autorité sud-coréenne à sanctionner les deux entités, en distinguant la responsabilité de celle dont le système a servi de poin...
L'autorité norvégienne de protection des données (Datatilsynet) s'est associée à plusieurs autres entités publiques pour fournir des recommandations sur la prévention et la gestion des violations de données.En collaboration avec l'Autorité nationale de sécurité (NSM), la Police et la Direction de la...
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May.
The incident, the company said, took place during cybersecurity evaluations o...