> TODAY'S SUMMARY (44 articles)
Today's cybersecurity landscape highlights several significant threats. Chainalysis reported a data breach resulting from an AI-driven cyberattack that exploited offensive agentic techniques. Meanwhile, the FBI attributed a massive $6.3 billion cryptocurrency heist from Binance to North Korean hackers, known as TraderTraitor, prompting urgent calls for the crypto industry to bolster transaction monitoring. Ransomware continues to pose a threat, with Synology warning of increased C3RB3R attacks targeting NAS devices. Additionally, attackers impersonated IT support on Microsoft Teams to gain unauthorized access to company data, and a supply chain attack involved a malicious code extension that created reverse SSH tunnels. These incidents underscore the evolving tactics of cybercriminals, particularly the integration of AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Ubuntu 20.04 LTS has addressed multiple vulnerabilities in the Linux kernel, requiring updates and a system reboot. Users must also recompilē third-party kernel modules due to ABI changes.
Ubuntu released a security notice for vulnerabilities in the linux-fips kernel affecting Ubuntu 16.04 LTS, urging users to update their systems to mitigate potential compromises.
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- InfiniBand drivers;
- Media drivers;
- STMicroelectronics network d...
The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data.
The post Apollo discloses data breach from ongoing wave of attacks hitting financial sector appeared first on CyberScoop.
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0.
"When the module loads, it locates the bundled binary,...
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa’s EMV kernel. Researchers at the University of Massachusetts Amherst demonstrated at USENIX Security 2026 in Baltimore that expired Visa contactless credit cards can...
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]
This sort of research is both exciting and terrifying:
The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside.
Using an existing bacteriophage as an example—ΦX17...
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal security risks.
The post Former NSA Director Paul Nakasone Launches National Security Advisory Firm appeared first on Sec...
L'autorité danoise de protection des données réitère sa position ferme selon laquelle les difficultés organisationnelles internes, telles que le manque de ressources ou un arriéré de dossiers, ne constituent pas une justification valable pour le non-respect des délais de réponse aux demandes de droi...
L'Agence pour la protection des données personnelles (AZOP) a émis un avis de principe sur les modalités de communication de la documentation d'un processus de recrutement à un candidat non retenu.Saisie de la demande d'une candidate au poste de directeur d'école souhaitant obtenir copie de la docum...
Escape Data ZATAZ 2.0 mêle escape game, OSINT, observation et réflexes cyber dans une enquête numérique estivale.
L'Agence pour la protection des données personnelles croate (AZOP) a émis un avis sur l'équilibre entre la transparence des réunions d'un conseil d'établissement scolaire et la protection des données lors de la nomination d'un directeur.Saisie d'une demande concernant la présence du public lors d'un...
The bank said there is no evidence that its own systems, networks or data repositories were compromised.
This week, EFF, along with Big Brother Watch, Defend Digital Me, Liberty, Open Rights Group, Race Equality First, Statewatch, and Stopwatch, wrote to Nottinghamshire Police Force in the UK raising concern about the proposed roll-out of live facial recognition technology (LFR), and called for its imm...
Cyberattaque : des données de clients Pokémon Center exposées et certaines précommandes annulées en Europe.
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [...]