> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform. [...]
Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.
The chain, t...
A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs
L'installation du pilote réseau de 6 mini PC Geekom est détecté comme malveillant par 4 plateformes d'analyse, mais tous les PC ne sont pas infectés.
Le post Geekom : un pilote réseau malveillant était téléchargeable depuis son site de support a été publié sur IT-Connect.
A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted that the top search result for the suspicio...
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE CISA added a critical flaw in the open-source Ray distributed computing framework to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The bug, rated 9.4 in severity, stems from Ray’s lack of au...
Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally.
Zimperium zLabs, in a Wednesday report, said the Android malware also features...
The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilities.Â
The post OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses appeared first on SecurityWeek.
Oracle Linux 10 has released updates for the yggdrasil package, fixing CVE-2026-33810 and rebuilding it against an updated golang. New RPMs are available for x86_64 and aarch64.
Oracle Linux 10 has received updated RPMs for curl due to several vulnerabilities, including fixes for proxy issues, OAuth2 token leakage, and connection reuse problems, addressing numerous CVEs.
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices. [...]
Oracle Linux 10 has received an update with various kernel RPMs addressing multiple CVEs, enhancing security and adding new certificates, along with numerous bug fixes across different subsystems.
Oracle Linux released updates for .NET SDK and runtime, addressing multiple CVEs and adding support for Oracle Linux 9, with packages available for x86_64 and aarch64 architectures.
Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan
Oracle Linux 9 has released security updates for the Performance Co-Pilot (PCP) package, addressing multiple vulnerabilities and adding various enhancements and options in its tools.
Oracle Linux 10 has updated glib2 packages available, addressing multiple CVEs including buffer overflows and validation issues to enhance security and system stability.
Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discover key defense strategies.
The post Identity Abuse Through Trusted Communication Channels appeared first on Unit 42.
Oracle Linux Security Advisory ELSA-2026-56971 announces updated rpms for version 10 to address CVE-2026-60075, fixing a potential regex DoS vulnerability in date/time parsing.
Oracle Linux has released updates for PHP 8.4.24 addressing CVEs 2026-17543 and 2026-17544, with new RPMs for x86_64 and aarch64 architectures available via the Unbreakable Linux Network.
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.Â