> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outbound route to anywhere, a scripting engine sitting there for the taking. Christopher Frenz wants those capabilities deleted before anyone writes a...
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
The post Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers appeared first on SecurityWeek.
An analyst opening a queue on Monday morning will spend most of it on tickets that amount to nothing. Stellar Cyber’s Agentic Auto Triage closed 8,047 of those tickets on its own during customer trials, filing them as confident false positives. That covers 64% of every verdict the software issued. A...
Automates bug bounty triage with Sonnet for $58 a month, CSO says Mythos would cost $200k
Scammers are sending physical letters to cryptocurrency holders that copy the look of official IRS notices. The letters tell recipients they must enroll in something called a Digital Asset Compliance Portal before a deadline, or risk penalties. “If you receive a letter claiming to be from the IRS th...
Application Security Engineer Arcadia | USA | Remote – View job details As an Application Security Engineer, you will lead the application vulnerability management process by prioritizing and driving remediation of security findings. You will integrate and automate security tools within CI/CD pipeli...
Découvrez Gufw, l'interface graphique UFW sous Linux : installation, création des règles de pare-feu et bonnes pratiques, sans passer par la ligne de commande.
Le post Gufw : gérer le pare-feu UFW sous Linux avec une interface graphique a été publié sur IT-Connect.
The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater infrastructure.
The post New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems appeared first on SecurityWeek.
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]
Multiple legitimate DFIR tools abused by GOLD EMBRACE double-extortion specialists
L'Einstein Hospital Israelita, situé à São Paulo, a été victime d'une cyberattaque ayant compromis une partie de sa base de données de patients. Les informations potentiellement compromises incluent le nom, le CPF, la date de naissance, ainsi que des données de santé telles que des prescriptions et...
After compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establish persistent remote access
On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware.
Une vulnérabilité a été découverte dans les produits Check Point. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Les Ports de Caroline du Nord ont été victimes d'une cyberattaque qui a perturbé les opérations de leurs trois installations portuaires. L'incident, survenu le mardi soir, a nécessité l'activation du plan de contingence en cybersécurité et le passage à un traitement manuel des portes. L'attaque est...
Foresee a immédiatement activé ses mécanismes de défense en matière de sécurité de l'information et a fait appel à des entreprises et à des experts externes spécialisés dans la cybersécurité afin de contenir la faille, d'en évaluer l'ampleur et de renforcer l'infrastructure réseau. D'après l'évaluat...
De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans LibreNMS. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une falsification de requêtes côté serveur (SSRF) et une injection de code indirecte à distance (XSS).