> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contract and membership information is stored. [...]
An update for nginx in Ubuntu addresses a regression caused by a previous security fix, reverting the change until further investigation on vulnerabilities is completed.
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. [...]
Each feature that you add to a website results in a new element that has to be managed.
The credentials are accepted by a login page, the data by a contact form, new code is introduced by a plugin, and an API is used to connect your website to another service. It is also possible that an old staging...
USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression
in certain environments. This update reverts the fix for CVE-2026-42533
pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that nginx incorrectly handled certai...
Ubuntu Security Notice USN-8651-1 warns of a curl vulnerability affecting multiple Ubuntu releases, allowing sensitive information exposure. Users should update their systems to the latest package versions.
Ubuntu Security Notice USN-8639-1 addresses multiple vulnerabilities in libpng affecting various releases, potentially allowing denial of service or arbitrary code execution.
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021.
The end-to-end...
The idea behind OpenAI's Trusted Access for Cyber program is to give trusted defenders better models so they can report bugs and vulnerabilities to companies, with the aim of getting flaws patched faster.
The agencies said the hackers are taking aim at Siemens S7 Series programmable logic controllers in what could be a first.
The post AI-fueled attacks pose âactive threatâ to water, other sectors, U.S. agencies warn appeared first on CyberScoop.
'Personally owned body-worn cameras are prohibited,' ICE tells The Reg. Because the last thing DHS needs is more proof of misconduct
Flock's surveillance cameras track drivers across the US. We asked CEO Garrett Langley about abuse, oversight, and who's really in control.
Learn how Flock cameras track vehicles, why communities use them, and what their growing network means for your privacy.
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the companyâs electronic health record environments.
In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mostly in Ukraine and Russia. [...]
A legitimate-looking link or valid digital signature can offer false reassurance. Hereâs why familiar download safety checks arenât always enough.
OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident.
"As models become more capabl...
The National Security Agency (NSA), FBI and other federal agencies said the campaign is targeting Siemens S7 Series PLCs and was being fueled by âAI-assisted developmentâ alongside exploitation of known vulnerabilities.
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers (PLCs) in U.S. critical infrastructure. [...]
Ubuntu addressed security vulnerabilities in Cap'n Proto affecting multiple LTS versions, which could allow HTTP request or response smuggling. Users should update their systems for protection.