> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape is marked by several significant threats and trends. A sophisticated North Korean hacking group has used fake employment schemes to execute a record $6.4 billion theft from Binance, highlighting the dangers of social engineering. UK officials have warned of imminent AI-powered ransomware attacks targeting critical infrastructure, predicting a surge in such incidents by 2028. Additionally, enterprises face financial losses of up to $1 million per day from LLMjacking attacks that exploit large language models for unauthorized cloud resource usage. Meanwhile, Google dismantled a massive botnet of 1.3 million Android TV boxes that was involved in ad fraud. Lastly, multiple vulnerabilities have been discovered across various platforms, including critical flaws in Node-RED and Siemens devices, necessitating immediate attention from IT security teams.
|
// AI-powered summary generated at 20:00
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Eight years on, we're still paying to hide the future glimpsed during speculative execution
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- InfiniBand drivers;
- Network drivers;
- Mellanox network drivers;
- File systems infras...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- InfiniBand drivers;
- Network drivers;
- Network traffic control;
- IPv4 networking;
-...
Oracle Linux updated multiple kernel packages addressing various CVEs. Enhancements and bug fixes include security improvements for networking, memory management, and device handling in the latest version.
Oracle Linux has released updated rpms for version 10 to address a double-free vulnerability (CVE-2026-55995) in isns-utils and its libraries for both x86_64 and aarch64 architectures.
It was discovered that libgit2 incorrectly handled the Git Smart Protocol.
A remote attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. This issue only affected Ubuntu 14.04
LTS and Ubuntu 16.04 LTS. (CVE-2016-10128)
It was discovered that libgit2 incorrec...
Oracle Linux has released an update for gstreamer1-plugins-good packages to address CVE-2026-18649, fixing an issue related to excessive memory allocation from malicious RTP packets.
Oracle Linux 10 has received updates for udisks2 packages, enhancing btrfs support and addressing CVE-2026-7867 related to fstab mount authorization.
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider. [...]
Oracle Linux has released updated RPM packages for version 10 to address several security vulnerabilities and enhancements, involving additions to driver signing and disabling features for specific architectures.
Drones IA : collecte, conservation et floutage soulèvent des enjeux majeurs de vie privée.
Debian fixed security vulnerabilities in the Lemonldap::NG web SSO system, specifically related to insufficient access enforcement with GitHub and LinkedIn authentication backends in version 2.21.2+ds-1+deb13u3.
Debian has addressed multiple vulnerabilities in Flatpak that could lead to privilege escalation, sandbox escape, or information disclosure, urging users to upgrade to version 1.16.6-1~deb13u2.
China-linked hackers reportedly used eight AI agents to breach a government network, steal data and compromise accounts with minimal human oversight. Israeli cybersecurity firm Dream documented what looks like the first fully autonomous, end-to-end AI hacking operation against a government target. O...
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India.
The activit...
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
An extortion gang known for targeting transportation companies and private equity firms has taken credit for a breach at Uber Freight.
Israeli cyber firm Dream said the framework adapted mid-operation, corrected its mistakes and expanded as it went along.
The post Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan appeared first on CyberScoop.