> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.Â
Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
Cellebrite Genesis is expanding globally and is now generally available to enterprises, helping teams surface critical connections in minutes rather than weeks.
A usage policy for Flock license plate reader cameras tells police not to talk about the cameras:
When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain ter...
CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS). [...]
Microsoft explique comment lire les colonnes NPU et GPU du Gestionnaire des tâches pour savoir si vos applications exploitent le matériel IA de la machine.
Le post Votre PC utilise-t-il vraiment son NPU ? Windows 11 peut vous le dire a été publié sur IT-Connect.
Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con
OpenAI is previewing Private Safety Processing with early customers seeking greater certainty about how their data will be protected as AI systems become more capable. The system identifies patterns across related interactions while restricting OpenAI personnel from accessing the underlying content....
Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers that o...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added a Progress LoadMaster vulnerability, tracked as CVE-2026-64849 (CVSS score of 9.3), to its...
A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products.
According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code...
The US charged 17 Iranians over a years-long hacking campaign that stole 31TB from universities, companies and government agencies worldwide. Eight years after the original indictment first went public, US prosecutors just added eight more names to the list. The Justice Department unsealed a superse...
Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.
The post Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler appeared first on SecurityWeek.
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
The post Critical GitLab Flaw Exploited Shortly After Disclosure appeared first on SecurityWeek.
Tufin has announced the availability of Tufin Orchestration Suite (TOS) 5.3, helping enterprises further simplify security operations and maintain consistent control across increasingly complex multi-vendor, hybrid environments. As enterprise security environments continue to expand across cloud, fi...
CoSnitch (CVE-2026-24301) : un clic suffisait pour que Copilot exfiltre vos e-mails. Et c'est l'IA elle-même qui a livré la faille aux chercheurs.
Le post CoSnitch : Copilot a lui-même livré la faille qui permet de voler vos données a été publié sur IT-Connect.
The U.S. has charged 17 alleged members of Mabna Institute, an Iranian hacking-for-hire company accused of running a years-long campaign that stole data from American universities, companies, and government agencies.
The post US charges 17 Iranian hackers over 31-terabyte academic data theft appeare...
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed StopAndProtect, that has turned thousands of hacked WordPress websites into a shared platform...
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
The post Hackers Using AI to Target Siemens PLCs in Critical US Sectors appeared first on SecurityWeek.
Firefox 154 étend les protections du réseau local aux WebSockets, corrige 58 failles et ajoute le support de GeForce NOW pour jouer dans votre navigateur.
Le post Firefox 154 est disponible : WebSockets sous contrôle, GeForce NOW et 58 failles corrigées a été publié sur IT-Connect.