> TODAY'S SUMMARY (5 articles)
Today's cybersecurity landscape highlights several critical threats. Three individuals have been charged for leveraging AI to impersonate CEOs and attorneys, resulting in a $129 million theft scheme targeting company accounting departments. Meanwhile, CERT-IN has reported a significant uptick in AI-driven attacks against Indian fintech firms, particularly during weekends when defenses are typically weaker. A critical vulnerability in OpenSSH allows remote attackers to bypass authentication on certain Linux systems, raising severe security concerns. Additionally, the FBI and CISA have issued warnings about cyberattacks targeting industrial refrigeration systems, posing risks of food spoilage and potential hazards. These incidents underline the increasing sophistication of cyber threats and the urgent need for enhanced security measures.
|
// AI-powered summary generated at 04:00
A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]
CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems. TechCrunch reports that CareCloud, the New Jersey-based health tech company that stores patient records for more than 45,000 providers across the US, is finally notifying...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Modular Tools Inside a DPRK BlueNoroff ClickFix Kit SourTrade: Browser-Assembled Malware Delivered Through Ma...
Agents Week explores how cloud infrastructure must evolve to serve autonomous agents rather than human browsers. Join us as we unpack the storage, execution, and security primitives needed for an agent-native web.
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft...
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. [...]
Hereâs an overview of some of last weekâs most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they can access sensitive files, credentials, and production systems. A prompt injection, h...
Debian announced the fix of multiple vulnerabilities in libssh that could lead to denial of service, information disclosure, and arbitrary code execution, urging users to upgrade their packages.
After attacks hit 30+ Minnesota water systems, CISA urged utilities to remove internet-exposed PLCs and strengthen OT security. Between Sunday and Monday, July 26 and 27, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water utilities across the state, acc...
Le DNSC (Directoratul NaÈional de Securitate CiberneticÄ) a fourni son assistance Ă Techventures Bank S.A. aprĂšs qu'elle ait signalĂ© une cyberattaque par ransomware. L'incident a Ă©tĂ© notifiĂ© le 2 aoĂ»t 2026. Les autoritĂ©s collaborent avec la banque pour limiter les effets de l'attaque et enquĂȘter sur...
La Chambre des salariés (CSL) a confirmé avoir été victime d'une attaque informatique impliquant un accÚs non autorisé à certains de ses serveurs. L'incident est actuellement contenu, mais des investigations approfondies sont en cours pour déterminer l'origine, la période, l'étendue et les conséquen...
An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.
A March 2021 firmware integr...
Le Magyar ĂllamkincstĂĄr (TrĂ©sor d'Ătat hongrois) a Ă©tĂ© victime d'une cyberattaque ciblant le rĂ©seau informatique de son service agricole et de dĂ©veloppement rural (Nemzeti KifizetĆ ĂgynöksĂ©g). L'incident a Ă©tĂ© dĂ©tectĂ© et les serveurs infectĂ©s ont Ă©tĂ© isolĂ©s. Les autoritĂ©s compĂ©tentes, dont le Centre...
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]
Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group al...
Entre deux alertes cyber et un Wi-Fi dâhĂŽtel douteux, ZATAZ passe en mode Ă©tĂ© avec une playlist de cinq titres originaux pour accompagner vacances, trajets et pauses au soleil.
Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the companyâs enterprise marketing automation...
The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO.
The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek.
The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE).
The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.