> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Northflank has experienced a security breach, prompting customers to rotate their API keys due to unauthorized access. A new Android exploit, the "SMS of Death," has surfaced, allowing attackers to remotely crash unpatched devices. Chainalysis disclosed a breach involving customer data exposure, while a critical vulnerability in Drupal Commerce is being actively exploited. The number of DDoS attacks has surged, with Cloudflare reporting an increase of 38% in Q3. Meanwhile, malicious extensions and AI-driven infostealers like VOLTA are emerging as advanced threats, leveraging AI for victim profiling and data theft.
|
// AI-powered summary generated at 20:00
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks.
The AI company said the incident took place on October 3 and 6, 2026, for Sol and As...
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]
Guide Includes Easy, Quick Ways To Identify and Protect Against Online Threats SAN FRANCISCO – The Electronic Frontier Foundation (EFF) has published “Online Privacy for Parents and Youth,” a new guide to help families protect themselves online.Â
"Parents don’t need to be technology experts to help...
Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.
Several security issues were fixed in U-Boot.
Two critical vulnerabilities in PHP allow remote code execution on the server without authentication. We explain who’s at risk, and how to update.
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the
corresponding fix for U-Boot on Ubuntu 26.10.
Original advisory details:
Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot
incorrectly handled certain NFS READ and NFS READLINK responses. An
attacker could poss...
PHP 8.5.12, 8.4.27, 8.3.36 et 8.2.35 corrigent PHP2Shell, deux failles RCE exploitables sans authentification. À traiter en urgence pour protéger votre serveur.
Le post PHP2Shell : les correctifs de sécurité sont là , les attaques aussi ! a été publié sur IT-Connect.
The Perl XS::Parse::Keyword module could be made to crash if it received specially crafted input.
Several security issues were fixed in PyJWT.
Rick de Jager discovered that Ghostscript incorrectly handled memory
under certain circumstances when processing PostScript documents. If a
user or automated system were tricked into processing a specially crafted
document, an attacker could possibly use this issue to bypass the sandbox
and execute...
PHP could be made to crash or run programs if it received specially crafted network traffic.
USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 26.04 LTS and Ubuntu 26.10. This provides the corrosponding updates
in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04
LTS.
Original advisory details:
It was discovered that PHP incorrectly handled...
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend servers, or bypass of client certificate authentication. CVE-2026-15176
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaw...
Ce mercredi 21 octobre 2026, une importante panne perturbe le réseau mobile d'Orange et de sa marque low cost Sosh.
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset.
Websites down as precaution as exploits have already been published
Today we’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents. Our patching-bugs plugin reproduces reported bugs, develops fixes, and tests them. The regression-hunt plugin checks whether any changes break previous...
Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools.