> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several significant threats and trends. A large-scale watering hole campaign attributed to the Russian state-sponsored group APT29 is actively targeting iOS and Android devices, raising concerns for users in the US and Europe, particularly Ukraine. Scammers are exploiting the hype around the upcoming Grand Theft Auto VI release to distribute malware and crypto scams. Meanwhile, a major breach at Norway's aid agency has reportedly compromised user data, particularly of those in sensitive regions. On the technological side, Google is enhancing its AI tool for vulnerability detection, while recent findings show a concerning rise in AI-driven attacks, necessitating better governance and controls. Additionally, vulnerabilities in Zyxel switches and a critical flaw in Apple's systems continue to pose risks, underscoring the importance of timely patches and security measures.
|
// AI-powered summary generated at 12:00
Round two from Black Hat USA 2026. This set covers the parts of the show floor that did not make the first gallery. Scroll through below. Featured vendors: BlackCloak, Teleport, GitGuardian, Oak, Hexnode, Picus Security, Featured speaker: Kate Silverstein (Mozilla) discussing crowd-sourcing protecti...
North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review.
The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Softw...
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontar...
You wouldn't let Claude Code cat your AWS credentials or Kubernetes config on request, would you?
An exposed SISVISA database leaked 102,215 Brazilian health records, exposing IDs, tax data, and regulatory documents without authentication. Researcher Jeremiah Fowler found a publicly accessible database that turned out to belong to SISVISA, Brazil’s Health Surveillance Information System, and ale...
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
A local privilege escalation vulnerability in udisks2 (CVE-2026-7867) allows unprivileged users to influence mount execution paths, necessitating an upgrade to version 2.10.1-12.1+deb13u2.
Learn what vishing is, why AI voice cloning makes voice phishing harder to spot, and get vishing attack prevention tips for your business.
L'autorité espagnole de protection des données (AEPD) a publié une décision de classement d'une plainte contre Meta Platforms Ireland Limited, concernant l'utilisation de données personnelles pour l'entraînement de modèles d'intelligence artificielle. La plainte a été rejetée car l'entreprise a volo...
Sanction pour un défaut de gouvernance interne ayant permis un accès non autorisé à des données, une collecte excessive de données sensibles, un manquement à l'information et des communications commerciales illicites.Faits et contexteL'Autorité Nationale de Surveillance du Traitement des Données à C...
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run.
MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJEC...
This post assumes familiarity with envelope encryption and the AWS Encryption SDK. When your encryption system generates millions of duplicate API calls per hour, costs spiral and performance degrades. That’s exactly the challenge NICE Actimize faced while operating their global-scale, event-driven...
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure that its agents breached Hugging Face. [...]
Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database
A U.S. court sentenced Ransom Cartel founder Maksim Silnikau to 16 years for running a ransomware-as-a-service operation. Maksim Silnikau (aka “J.P. Morgan,” “lansky,” and “xxx,”) built a ransomware business the way a franchise owner builds a chain: he never had to touch most of the crime scenes him...
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job.
This week runs on cheap leverage: exposed servers, recycled bugs, poisoned agent instructions, remote-access tools dressed as suppor...
From record-breaking imaging speeds to automated RAID reconstruction and 50 Gbit/s networking, discover how TaskForce evolved over eight years into a comprehensive forensic acquisition platform built to remove investigators’ next bottleneck.
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada.
The post Snowflake Hacker Pleads Guilty in US Court appeared first on SecurityWeek.
Researchers have found three methods to bypass Apple's Private Relay which is supposed to shield users' IP addresses and location.