> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22.
The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. The ri...
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek.
The businesspeople adopting AI notetakers are not being reckless. They are responding to a real business need. Our teams are in meetings all day with companies we support, and the idea that we could read a clean summary of every one of them at the end of the day makes us bette...
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
The post Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ appeared first on SecurityWeek.
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this summer through a honeypot posing as an unprotected AI service, re...
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.
The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek.
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.
The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek.
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated.
Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feedi...
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought.
The attacks aim to exploit CVE-2...
Une réponse HTTP compressée en Brotli, et du code qui s'exécute dans votre application Node.js : c'est le risque avec la faille Node2Shell (CVE-2026-111497).
Le post Node2Shell : la faille Brotli qui expose Node.js à une exécution de code à distance a été publié sur IT-Connect.
After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016.
The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared first on SecurityWeek.
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries. INTERPOL announced the results of Operation Serengeti III, a multinational cybercrime crackdown that led to 1,462 arrests, disrupted 10,909 malicious networks...
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires fa...
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity...
333 relais de sortie Tor compromis redirigeaient les connexions SSH vers des serveurs pirates pour voler les mots de passe et installer le malware Ebury.
Le post Réseau Tor : 333 relais de sortie compromis interceptaient les connexions SSH pour diffuser Ebury a été publié sur IT-Connect.
Plus de 11,7 millions de comptes CAPCOM ID exposés et 196 mots de passe modifiés par un attaquant : Capcom confirme une fuite de données massive.
Le post Capcom piraté : 11,7 millions de comptes exposés et des mots de passe changés par l’attaquant a été publié sur IT-Connect.
Amazon a repéré une tentative d'exploitation de PHP2Shell le 17 octobre 2026, soit quatre jours avant la sortie des correctifs pour ces failles critiques.
Le post PHP2Shell : les attaquants avaient quatre jours d’avance sur le correctif a été publié sur IT-Connect.
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level...