> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds.
In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation Serengeti III, the...
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.
PHP maintainers have released two critical vulnerabilities:
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
Who is at risk: all PHP installations serving web req...
A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security researcher Kevin Beaumont wrote on Mastodon. In Augu...
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]
Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil
Sam Abbot, Emi Polito and Andrea Frisina go behind the scenes to show how your feedback becomes new features in Amped FIVE, Replay, Authenticate and DVRConv, and why forensic soundness always comes first.
Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program.
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek.
Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released earlier this week and said it is tightening its defenses, b...
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek.
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek.
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed