> TODAY'S SUMMARY (109 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. **AI and Cloud Exploits**: Google warns of "LLMjacking" attacks, where criminals hijack access to large language models, leading to cloud charges exceeding $1 million for some businesses. This tactic underscores the growing intersection of AI and cybercrime.
2. **Increased Ransomware and Espionage**: The UK faces a surge in cyberattacks, particularly AI-powered ransomware targeting critical infrastructure. Russian-aligned groups are actively exploiting vulnerabilities to target Ukrainian organizations, emphasizing ongoing geopolitical tensions.
3. **Malware and Vulnerability Exploits**: Multiple vulnerabilities have been discovered in widely used software, including critical flaws in Node-RED and Siemens devices, leading to potential remote command backdoors and botnet installations.
4. **Cybercrime Infrastructure Dismantling**: Law enforcement has successfully dismantled a botnet of over 1.3 million compromised Android TV devices, showcasing collaborative efforts to combat cybercrime.
5. **Emerging AI Threats**: As AI tools become more prevalent, organizations are urged to bolster their defenses against sophisticated attacks that exploit vulnerabilities in their systems, highlighting the pressing need for improved cybersecurity strategies.
|
// AI-powered summary generated at 16:00
Cl0p revendique Philips et Shell : compromission reconnue chez Philips, enquête chez Shell, données volées non confirmées.
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. [...]
In this edition of the Threat Source newsletter, William reflects on the “Make Hazel a Hacker” segment in Beers with Talos, and how cybersecurity is a field where questions can lead to multiple correct answers.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- InfiniBand drivers;
- Network drivers;
- Thunderbolt and USB4 drivers;
- Network traffic...
L’été, c’est souvent le moment où l’on ouvre les placards, où l’on retrouve quelques vieilles boîtes oubliées et où l’on se demande pourquoi on les avait rangées là. Chez ZATAZ, le ménage est aussi numérique. Ces dernières semaines, plusieurs anciens outils maison ont été ressortis, dépoussiérés, co...
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Hackers began targeting a critical Adobe Commerce flaw that could let unauthenticated attackers hijack customer accounts and access private data. Hackers began targeting CVE-2026-71362 (CVSS score of 9.1), a critical Adobe Commerce flaw, shortly after its public disclosure. The vulnerability allows...
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- InfiniBand drivers;
- Network drivers;
- Mellanox network drivers;
- File systems infras...
Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid AI detection evasion services. None of the tools' claims about defeating the text watermark can be verified, as Anthrop...
ZATAZ vérifiera en direct sur Twitch si votre adresse figure parmi 1,7 milliard d’identifiants découverts.
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabili...
As frontier models and their sandbox escaping exploits dominate front-page news, researchers are increasingly worried about cheaper, more efficient AI models.
The post AI’s ‘middle class’ has gotten dramatically better at hacking appeared first on CyberScoop.
Multiple vulnerabilities were found in apr-util affecting denial of service and arbitrary code execution; updates have been released for the stable distribution to address these issues.
All Flock Safety customers will be required to adopt its "Audit Assistance" feature for tracking abnormal uses, and the company says it will hold license plate data for only seven days in most cases.
Magento : le logiciel ciblé quelques heures après la divulgation d'une faille, avec un risque d’accès aux comptes clients.
L'autorité polonaise de protection des données (UODO) met en garde contre les risques pour la vie privée liés à l'utilisation des lunettes intelligentes.L'autorité rappelle que l'enregistrement d'images et de sons par ces appareils constitue un traitement de données personnelles dès lors qu'il ne s'...
L'autorité polonaise de protection des données (UODO) va inspecter la société MyDr suite à une fuite de données de santé.Cet audit fait suite à des notifications de violation de données personnelles émises par des établissements de santé clients de l'application MyDr. La société agit en tant que sou...
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]
L'autorité britannique de protection des données (ICO) a publié des orientations sur l'application du RGPD britannique à la gestion et à la publication des résultats d'examens.En vertu du RGPD britannique, les étudiants peuvent demander l'accès à leurs notes, aux commentaires des examinateurs et aux...