> TODAY'S SUMMARY (11 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A memory corruption flaw in Google's Brotli decoder affects multiple widely used applications, including Node.js, Python, and Envoy, posing risks of remote code execution. LiteLLM reported a serious incident where a leaked master key allowed attackers to hijack its GitHub release pipeline. In data breach news, Capcom suffered a breach exposing 11.7 million email addresses, while patient data was stolen in an attack on Point Vision. Additionally, the U.S. CISA highlighted actively exploited vulnerabilities in Collabora Online and Arista VeloCloud, urging immediate attention. Lastly, a new tool called Pulse has been released to help users interpret Windows event logs more clearly.
|
// AI-powered summary generated at 12:01
Release presentation At 08:00 UTC (10:00 CEST) of the release day, as the tradition dictates, I do a live-streamed release presentation on Twitch. Made available on YouTube after Numbers the 277th release4 changes42 days (total: 10,929)281 bugfixes (total: 14,770)476 commits (total: 40,084)0 new pub...
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contact...
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.
The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into hand...
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware has changed a lot. Over the past year the...
In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes from going out. Modasiya argues that speed alone has limits an...
Microsoft a corrigé 1 407 failles avec le Patch Tuesday d'octobre 2026, un nouveau record. Une faille zero-day est déjà exploitée : voici ce qu'il faut savoir.
Le post Patch Tuesday – Octobre 2026 : 1 407 failles corrigées, dont trois failles zero-day a été publié sur IT-Connect.
Microsoft propose les cohortes de risque pour prioriser les correctifs du Patch Tuesday. DĂ©couvrez ce nouveau principe qui reste tout de mĂŞme perfectible.
Le post Patch Tuesday : Microsoft teste les cohortes de risque pour vous aider à trier plus de 1 400 CVE a été publié sur IT-Connect.
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, and push it to multiple...
KB5126657 pour Windows 10 : le bug de l'Historique des fichiers est corrigé, un bug audio USB persiste et ReFS sur disque USB sera bloqué en janvier 2027.
Le post Windows 10 – KB5126657 : voici la mise à jour de sécurité d’octobre 2026 a été publié sur IT-Connect.
KB5127648 et KB5126653 : le Patch Tuesday d'octobre 2026 corrige le bug de l'écran noir sur AVD et le VPN Always On sur Windows 11. Voici un récapitulatif.
Le post Windows 11 KB5127648 : voici l’essentiel à savoir sur la mise à jour d’octobre 2026 a été publié sur IT-Connect.
37% of ransomware attacks involve psychological or physical threats, global survey found
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation.
These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Ser...
Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked to an insider incident in the past 12 months. The agent logs in, reaches sensitive systems, and acts for a pe...
Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payments for memory corruption vulnerabilities and expanding rewards for other security flaws, fixes and research tools. “A primary goal of the Chrome VRP has always been to identify ways to improve our internal tes...
OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors.
In ad hoc misalignment testing, OpenAI models found creative ways to subversively access restricted information by c...
Dominique Dumont discovered that YAML-LibYAML did not correctly handle
certain reflection operations. If a user or system were tricked into
opening a specially crafted file, an attacker could possibly use this issue
to delete files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CV...
When quantum vendor IonQ on Sunday announced a $1.2 billion all stock deal to take over cybersecurity vendor Elisity, it spoke of a near-term future where enterprise quantum cybersecurity needs will move beyond replacing to-be-outdated encryption.
The acquisition brings tog...
Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins.
The bugs in...
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations.
Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an...