> TODAY'S SUMMARY (44 articles)
Today's cybersecurity landscape highlights several significant threats. Chainalysis reported a data breach resulting from an AI-driven cyberattack that exploited offensive agentic techniques. Meanwhile, the FBI attributed a massive $6.3 billion cryptocurrency heist from Binance to North Korean hackers, known as TraderTraitor, prompting urgent calls for the crypto industry to bolster transaction monitoring. Ransomware continues to pose a threat, with Synology warning of increased C3RB3R attacks targeting NAS devices. Additionally, attackers impersonated IT support on Microsoft Teams to gain unauthorized access to company data, and a supply chain attack involved a malicious code extension that created reverse SSH tunnels. These incidents underscore the evolving tactics of cybercriminals, particularly the integration of AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Oracle Linux released updates for version 10, addressing CVE-2026-72693 with enhancements to the openvt process matching. New RPMs are available for x86_64 and aarch64 architectures.
Oracle Linux has released several kernel updates addressing multiple CVEs, including security enhancements and fixes for various stability and performance issues in its 10th version.
The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.
Oracle Linux 10 updates include versions of ansible-core and ansible-test that address CVE-2026-11332, which involved potential arbitrary git configuration injection during role installation.
Oracle Linux has released updated Java packages for version 10 to address several CVEs, including CVE-2026-60589 and others, with a detailed list of RPMs provided.
Malicious updates turned routine builds into a delivery system for infostealer malware
Oracle has released multiple updated RPM packages for Oracle Linux 10, addressing several CVEs and including various versions of Java 21 OpenJDK with enhancements and fixes.
Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates may be caused by peripherals with RGB lighting. [...]
DYSPHOR1A émerge comme un nouveau groupe ransomware maître chanteur, avec ventes, fuites et retraits payants de données.
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
The post Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini appeared first on SecurityWeek.
Kaspersky experts have discovered a trojan that infects car head units and makes them part of a botnet. Here’s how the infection works.
Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked.
The post New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets appeared first on SecurityWeek.
Découvrez Endstate, un outil open source qui sauvegarde les applications et les réglages d'un PC Windows dans un fichier, puis les restaure sur un nouveau PC.
Le post Endstate : sauvegarder et restaurer ses applications Windows (et leurs configs) sur un nouveau PC a été publié sur IT-Connect.
Business email compromise attacks don't rely on links or malware. Learn how they work and the controls that stop them.
Scientific research showed that the expiration date on some Visa credit cards can be manipulated in so-called Zombie Card attacks.
Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separate digital personas can reduce correlation and limit the impact of breaches, spam, and identity theft. [...]
Un membre d’un forum pirate russe recrute des francophones pour un VPN, malgré un historique lié au spam et aux RAT.
The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the company's network traffic analysis platform.
Microsoft a corrigé la CVE-2026-69836, une faille critique dans Entra ID déjà exploitée dans la nature. La bonne nouvelle : vous n'avez rien à faire.
Le post Entra ID : une faille critique a été exploitée, mais vous n’avez rien à patcher a été publié sur IT-Connect.
Every other web platform feature I've ever written about, I've been able to test in some easy way. Open DevTools, type the name of the thing, see if it's there. Device Bound Session Credentials doesn't work like that: there is no way