> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and updates. Ivanti has patched two zero-day vulnerabilities (CVE-2026-111357 and CVE-2026-118527) exploited in attacks on its Connect Secure VPN, underscoring ongoing risks in remote access technologies. A new Windows infostealer named VOLTA utilizes AI to prioritize stolen data based on the victim's financial value, indicating a troubling trend in malware sophistication. Additionally, the Aur0ra ransomware gang is employing AI agents to enhance their network infiltration and credential theft capabilities. In response to data scraping concerns, Reddit plans to restrict content access to logged-in users. Various Oracle updates address security flaws in Linux, including DNS attack vulnerabilities and mTLS connection issues, highlighting the importance of regular patching in mitigating risks.
|
// AI-powered summary generated at 08:00
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet. [...]
Glassbox dev admits he had some help from Claude to build locally running tool
The legislation would mandate that high-risk social media platforms such as Instagram, TikTok, Snapchat and Facebook take “reasonable steps” to ensure users are over age 16 by using tools like facial age estimation, digital ID services, formal IDs and existing account information for verification.
Ubuntu issued a security notice regarding FFmpeg vulnerabilities affecting several releases. Users are advised to update their systems to fix potential denial of service and information disclosure issues.
A curl vulnerability in Ubuntu 24.04 LTS could lead to exposure of sensitive information due to improper handling of connection reuse with changed client certificate settings.
Weeks after OpenAI disclosed that one of its cybersecurity models had gone rogue and hacked AI dataset company Hugging Face, Alabama’s Attorney General announced an investigation into the incident.
Ubuntu has released a security notice regarding the AsyncHttpClient vulnerability that could expose sensitive information, affecting several LTS releases. Users are advised to update their systems.
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
It’s a follow-up to an indictment the Justice Department unsealed last week against people affiliated with the Mabna Institute.
The post Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’ appeared first on CyberScoop.
Under the bill, FERC would consider cyber threats from quantum computers and post-quantum cryptography in its reliability standards for the energy sector.
The post Bipartisan Senate bill aims to prepare energy sector for Q-Day appeared first on CyberScoop.
We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience.
A Jersey City resident is facing charges for his alleged role as a money mule for overseas cyberscammers who stole millions from elderly New Yorkers.
Early testers are raving about what Instinct can do, but some say the AI assistant’s sweeping access, broad terms and ability to act on users’ behalf come with uncomfortable trade-offs.
The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA). [...]
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Minecraft clients.
McAfee Labs said it detected and blocked more than 6,300 attempts to access malicious sites, adding that it found lookalike g...
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek.
A fake 113GB GTA VI build is packed with malware, using massive empty files to hide a tiny malicious payload. GTA VI hype has reached the point where people are volunteering to infect their own computers just to check if a leak is real. Someone on X asked their followers to “take one for the […]
La Commission de protection des informations personnelles de Corée du Sud (PIPC) a récompensé un agent et deux équipes pour leurs contributions notables en matière de protection des données dans le cadre de la troisième édition des "Prix de la baleine de l'information personnelle".Ces prix, accompag...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié des recommandations sur l'utilisation des outils collaboratifs en ligne dans l'enseignement du premier et du second degrés, afin d'assurer leur conformité avec le RGPD.Les établissements scolaires, en tant que responsables de...
Adrian Junge was discovered that FFmpeg incorrectly handled certain media
files. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. (CVE-2026-66036, CVE-2026-66039)
Adrian Junge discovered that FFmpeg incorrectly handled certain media
files. An attacke...