> TODAY'S SUMMARY (17 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. The upcoming November 2026 Patch Tuesday is expected to address numerous CVEs, indicating ongoing vulnerabilities in older software systems.
2. A significant backdoor was discovered in Control Web Panel, enabling unauthorized command execution without logging, underscoring the risks in web server management tools.
3. Barracuda's Email Security Gateway was found to have exploitable flaws allowing root access without authentication, posing a major risk to email security.
4. New AI-driven scams have emerged, including a scheme where individuals impersonated CEOs to defraud companies of $129 million.
5. CERT-IN reported a rise in AI-powered attacks specifically targeting Indian fintechs during weekends, indicating a strategic shift by threat actors.
6. The FBI and CISA issued warnings about cyberattacks on industrial refrigeration systems, raising alarms about potential food safety and operational hazards.
|
// AI-powered summary generated at 08:00
Maxim Suhanov discovered that the NTFS file system implementation in the
Linux kernel did not properly validate file name length in certain
situations, leading to an out-of-bounds read. An attacker could use this to
construct a malicious NTFS image that, when mounted and operated on, could
expose se...
A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators.
Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co....
Cette semaine, les données personnelles restent au cœur des alertes cyber. L'Hacktivisme politique semble faire son retour en France... ou pas !
Debian announced multiple vulnerabilities in the Linux kernel, which could cause privilege escalation, denial of service, or information leaks, resolved in version 6.12.100-1 for the stable distribution.
OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup
Un pirate revendique un accès au CRM français d’ENI et diffuse des factures de professionnels et grands comptes.
This post is available as a printable one page handout in English and Spanish.
Recordings of law enforcement, whether by bystanders or by those directly encountering officers, can be powerful tools of government accountability and can support movements for social change. But recording officers can c...
Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security soft...
Kaspersky Next XDR Expert and Kaspersky Next EDR Expert now support the Nutanix 7.3 hypervisor.
A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff
Google is creating a new naming scheme for the bad actors behind cybersecurity threats, hoping that it will help to standardize the way that attacks are reported. Spoiler: It won’t.
Security researchers use these naming schemes so that they can attribute attacks without nec...
Google says AI found and helped fix 1,072 Chrome security bugs in two releases, dramatically accelerating vulnerability detection and patching Google’s Chrome Security team published a detailed account of how AI models have transformed their vulnerability management pipeline, and the headline figure...
Un hacktiviste exhume des données de 2017 pour attaquer Chat Control et justifier une fuite politique controversée.
Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VMware ESX, VMware vCenter, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware vSphere Foundation, VMware...
Last year we made every Cloudflare server a Media over QUIC (MoQ) relay. Now the new provisioning API lets you create your own isolated relay and control who can publish and who can only watch.
Police flag 4,000 URLs to disrupt The Com, theft victims sue Apple over a $1.8M wallet scam, and OpenAI and Anthropic models reach real systems in cyber tests.
Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enab...
Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers and Microsoft’s own.
Google subsidiary Wiz found a flaw in the database’s Gr...
Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined.
Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, t...