> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
A phone backup app asks for storage, contacts, SMS, and call logs. A device-management tool asks for more than that. Run either one past a machine learning malware scanner and it comes back flagged. Six Android detectors in wide research use, including Drebin, MalScan, and MaskDroid, produced that r...
Popular telehealth provider Hims & Hers "shared consumersâ sensitive health information with third-party advertising platforms such as Meta and Snap despite promising to protect patient privacy," the federal government alleges.
Docs point to Chinaâs Unitree as prime example of the foreign clanker threat
Thereâs new benchmark measuring AIâs ability to perform mathematical cryptanalysis. Anthropicâs frontier model actually found new attacks.
The benchmark: âCryptanalysisBench: Can LLMs do Cryptanalysis?â The idea is to benchmark the ability of LLMs to discover new mathematical cryptanalytic attacks a...
New Samba packages addressing multiple security vulnerabilities are available for Slackware 15.0 and -current. Users are advised to upgrade and restart the service if running.
New SeaMonkey packages for Slackware 15.0 and -current are available, addressing security issues with version 2.53.24. Users can download the updated packages from designated Slackware repositories.
Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendorâs FortiSASE Outpost software, extend cloud-based SASE (secure access service edge) capabilities and policy enforcement to on-premises environments.
The new midrange Forti...
New libarchive packages for Slackware 15.0 and -current address security issues, providing an upgrade to version 3.8.9 with bug fixes and minor features.
The âno manâs landâ beneath the OS on enterprise servers is becoming the malicious actorsâ next target.
Attackers are gaining a foothold into broader data center environments by exploiting Baseboard Management Controllers (BMCs) that are largely unprotected, still running d...
Security leaders have spent the last decade building controls around people and code. Shift-left practices caught vulnerabilities earlier in the development cycle. Zero trust reduced lateral blast radius. Developer tooling added guardrails at the IDE. The architecture was soun...
In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four âpublicly available servicesâ in its unhinged quest to solve a test.
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively leveraged in the wild, one that the vendor says âmay allow a remote attacker to access privileged internal functionality and impact the VCO host.â
The Arista security advisory added that...
The deal is Cyera's third acquisition this year.
Beacon CRM, une plateforme de gestion de données utilisée par diverses organisations culturelles, a été victime d'une cyberattaque impliquant un accÚs non autorisé temporaire à ses systÚmes. L'incident, découvert le 29 juillet, a entraßné la copie potentielle de sauvegardes de bases de données. Les...
Mistertemp' group, un groupe français de recrutement et de travail temporaire, a confirmé avoir été victime d'un incident de sécurité informatique le 29 juillet 2026. Cet incident a entraßné un accÚs non autorisé à certaines données personnelles, incluant le nom, le prénom, l'adresse e-mail, le numé...
Part 2 of a series on implementing zero trust in Red Hat OpenShift with the layered zero trust validated pattern (ZTVP)In our previous article, we explored why network policies, specifically a default-deny posture combined with strict ingress and egress rules, are your critical last line of defense...
Post-quantum cryptography: The emerging threatThe transition to post-quantum cryptography (PQC) is becoming an urgent priority for the global financial sector due to the rapid evolution of quantum computing. Cryptographically relevant quantum computers exist only as research prototypes. However, the...
L'Université de Aveiro (UA) a détecté un accÚs non autorisé à ses systÚmes d'information, entraßnant l'exposition de données personnelles et institutionnelles. Le recteur a informé la communauté académique de cet incident et a demandé à tous les membres de changer leurs mots de passe, tout en recomm...
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données et un problÚme de sécurité non spécifié par l'éditeur.