> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic services. [...]
Wireshark release 4.6.8 fixes 28 vulnerabilities and 25 bugs.
Debian released an advisory for vulnerabilities in Neutron, the OpenStack virtual network service, urging users to upgrade to version 2:26.0.3-0+deb13u3 for better API permission validation.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM ShieldBreak – August 2026 disclosure  Kimwolf v7: A...
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. [...]
Mustang Panda upgraded CoolClient with a signed kernel driver that hides processes, files and network activity, making the backdoor harder to detect. HoneyMyte, also known as Mustang Panda, has pushed its CoolClient backdoor another step deeper into Windows. Kaspersky’s latest analysis shows a new v...
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's web browser. [...]
Corma CEO tells The Reg it's building 'One ring to rule them all, for the defenders to have this power'
Debian issued a security advisory for docker.io addressing multiple vulnerabilities that could lead to privilege escalation and unauthorized file access, urging users to upgrade to the latest version.
France’s tax agency says hackers stole data on 678,000 taxpayers, including income and tax details, in a sophisticated cyberattack. A threat actor claimed to have breached France’s tax agency in late June. France’s tax administration confirmed that a cyberattack exposed personal data of 678,000 indi...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Crooks Are Buying Your Expired Domains and Using Them...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: GitHub Dependabot malware alerts now cover eight ecosystems GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package...
Acronis uncovered PATCHCORD, a stealthy backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2. Researchers at Acronis just documented an espionage operation that reads like it was built by someone with genuinely good taste in disguises. Their Threat...
La présence d'une activité non autorisée sur les systèmes technologiques de l'Université du Texas à San Antonio (UT San Antonio) a nécessité la suspension de certains services en ligne et téléphoniques. L'incident a été détecté le week-end, avant qu'il n'atteigne les systèmes centraux. Les autorités...
Le service numérique de la mairie de Tangerhütte est inaccessible depuis plus de deux semaines en raison d'une attaque externe. Bien qu'un incident similaire à Berlin ait récemment conduit à la vente de données sur le Darknet, il n'est pas confirmé que cela soit arrivé à Tangerhütte.
New proftpd packages for Slackware 15.0 and -current address security issues, including a critical use-after-free bug and passive transfer settings. Updated packages are available online.
Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure. Every day, roughly 65,000 domain names that once belonged to someone else get re-registered by a new owner. Infoblox Threat Intel calls these dropc...
Attackers are actively exploiting a maximum severity SAP Commerce Cloud vulnerability, tracked as CVE-2026-58231, just days after SAP released a patch. A critical SAP Commerce Cloud vulnerability, tracked as CVE-2026-58231 (CVSS score of 10.0), is under active exploitation just days after SAP releas...
A guide on how to check if hackers have broken into your accounts on the most popular AI platforms.
Oracle Linux 8 has released updated Node.js packages addressing multiple CVEs, including security fixes and dependency updates for improved stability and functionality across both x86_64 and aarch64 architectures.