> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
Oracle Linux 8 has received updated RPMs for various .NET components, including SDK and runtime packages, addressing multiple CVEs and adding support for Oracle Linux.
Oracle Linux 8 has released updates for dracut packages addressing various bugs and performance improvements, including DHCP enhancements and boot time optimizations, linked to CVE-2026-15816.
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]
Oracle Linux 8 has released updates for various .NET packages including SDK and runtime, addressing vulnerabilities associated with specific CVEs and enhancing support for Oracle Linux.
Oracle Linux has released updated bind packages for version 8 addressing multiple CVEs, enhancing DNS security through various validation and rejection improvements in DNS records.
Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.
The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation.
"SAP Commer...
Hackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online. The Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS score of 9.8), less...
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned.
The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impac...
GeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems. A newly disclosed GeoServer zero-day is already attracting active exploitation attempts, and there is no patch available yet. Organisations running the open-source geospa...
2026: the year the tools learned to hack
In May 2026, OpenAI began testing an internal research model against a cybersecurity benchmark called ExploitGym. While the test environment was not supposed to have access to the open internet, there was, however, one narrow path out because the agents still...
OSINT Tools Update
New Firewall Guide
L'Information Regulator enquête sur une violation de données chez Cartrack, une société de suivi de véhicules. L'incident, qui est survenu en août, a été un incident de ransomware. Cartrack a confirmé que sa base de données client a été accédée, contenant des informations personnelles telles que les...
The New Blog
Une entreprise prestataire de la ConsejerĂa de Agricultura, nommĂ©e Tecnoabi, a Ă©tĂ© victime d'une cyberattaque qui a exposĂ© les donnĂ©es personnelles (identifiants, contacts et bancaires) de milliers d'agriculteurs et de propriĂ©taires de terres bĂ©nĂ©ficiaires des aides de la Politique Agricole Commune...
Le bureau de la ville de Lincoln a été contraint de fermer suite à une cyberattaque qui a chiffré une partie de son réseau. Les autorités locales travaillent à la restauration des systèmes pour éviter toute réinfection et minimiser les perturbations des services.
The New Blog
Le réseau de l'État de Berlin a été victime d'une cyberattaque. Deux administrations sénatoriales, celles de l'Aménagement du territoire et de la Mobilité, ont été isolées du réseau après la découverte d'une intrusion. L'attaque, attribuée à une vulnérabilité dans le système de l'administration de l...
L'entreprise d'oncologie Novocure a signalé un incident de sécurité cibernétique qui a exposé les dossiers internes de plus de 1 400 patients américains. L'accès non autorisé aux systèmes d'information a eu lieu à la mi-août.