> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
It was discovered that Samba's pam_winbind incorrectly handled home
directory ownership when mkhomedir was enabled. A local attacker could
possibly use this issue to cause a denial of service by triggering a change
in ownership of the root directory. (CVE-2026-15779)
Arjun Basnet, Douglas Bagnall,...
Apple issued a large July security update with several image processing related vulnerabilities that could compromise your device.
JetBrains patched a critical TeamCity flaw (CVE-2026-63077) enabling unauthenticated code execution on affected on-premise servers. JetBrains has released security updates for TeamCity On-Premises after discovering a critical vulnerability, tracked as CVE-2026-63077 (CVSS score of 9.8). The flaw cou...
The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing.
The post Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model appeared first on SecurityWeek.
Anyone could access other Click To Pray users' personal information. The flaw went unfixed for more than six months after it was reported.
Oracle released updated rpms for Oracle Linux 10 addressing CVE-2026-27145, featuring go-fdo-client version 1.0.0-4 rebuilt against an updated golang.
Oracle Linux 10 has received updates for libreswan packages, addressing several CVEs, with new versions now available on the Unbreakable Linux Network for x86_64 and aarch64 architectures.
Governments are switching, but I’m not sure it makes a difference:
…some municipalities, including Denver, Colorado, are ditching their Flock arrays. But keep in mind that if they’re only switching from Flock to another brand of license-plate readers, like Axon, it’s like a gambling addict trying to...
Oracle Linux 10 has received RPM updates for the go-fdo-server package, addressing CVEs CVE-2026-27145 and CVE-2026-39821, with improvements made by rebuilding against updated golang.
Oracle released updates for MariaDB Connector C on Oracle Linux 10 to address CVE-2026-44172, along with various related package versions for x86_64 and aarch64 architectures.
JetBrains has fixed a critical vulnerability (CVE-2026-63077) affecting TeamCity On-Premises and is urging admins to upgrade self-hosted servers as soon as possible. “For those who are unable to do so, we have released a security patch plugin,” noted Daniel Gallo, Solutions Engineering Lead at JetBr...
Oracle Linux 10 has released updated RPMs for libpq and libpq-devel, addressing CVE-2026-6477 by rebasing to upstream release 16.14, available on the Unbreakable Linux Network.
Oracle Linux 10 has received an update with new kernel RPMs addressing various security vulnerabilities and related CVEs, including fixes for memory leaks and permission issues.
The AI models, datasets, and automated systems researchers depend on can be compromised in ways conventional cybersecurity tools aren’t designed to detect. A new project called VERITAS (VERified Infrastructure for Trustworthy AI in Science) aims to close that gap by establishing AI Assurance as a co...
Oracle Linux 10 has released updates for several packages addressing security vulnerabilities associated with CVEs 2026-54512 and 2026-54513, including changes to Tomcat app server selection.
Oracle Linux 10 has an updated kernel package addressing CVE-2026-46323, including driver signing changes, certificate updates, and disabling signing for aarch64, reflecting multiple enhancements and conflicts.
Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks.
The post Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker appeared first on SecurityWeek.
Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack
Codex’s /goal feature amplifies bug hunting, but getting good results requires the right prompt, the right scope, and the right number of outcomes per run. For Patch the Planet, our joint initiative with OpenAI to find and fix bugs in open-source software, we pointed Codex at some of the most widely...
Act Security tackles the spiraling patch problem caused by AI’s ability to find new vulnerabilities in existing cloud environments.
The post Act Security Emerges from Stealth to Fight the Patch Problem appeared first on SecurityWeek.