> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several significant threats and trends. A large-scale watering hole campaign attributed to the Russian state-sponsored group APT29 is actively targeting iOS and Android devices, raising concerns for users in the US and Europe, particularly Ukraine. Scammers are exploiting the hype around the upcoming Grand Theft Auto VI release to distribute malware and crypto scams. Meanwhile, a major breach at Norway's aid agency has reportedly compromised user data, particularly of those in sensitive regions. On the technological side, Google is enhancing its AI tool for vulnerability detection, while recent findings show a concerning rise in AI-driven attacks, necessitating better governance and controls. Additionally, vulnerabilities in Zyxel switches and a critical flaw in Apple's systems continue to pose risks, underscoring the importance of timely patches and security measures.
|
// AI-powered summary generated at 12:00
After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016.
The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared first on SecurityWeek.
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries. INTERPOL announced the results of Operation Serengeti III, a multinational cybercrime crackdown that led to 1,462 arrests, disrupted 10,909 malicious networks...
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires fa...
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity...
333 relais de sortie Tor compromis redirigeaient les connexions SSH vers des serveurs pirates pour voler les mots de passe et installer le malware Ebury.
Le post Réseau Tor : 333 relais de sortie compromis interceptaient les connexions SSH pour diffuser Ebury a été publié sur IT-Connect.
Plus de 11,7 millions de comptes CAPCOM ID exposés et 196 mots de passe modifiés par un attaquant : Capcom confirme une fuite de données massive.
Le post Capcom piraté : 11,7 millions de comptes exposés et des mots de passe changés par l’attaquant a été publié sur IT-Connect.
Amazon a repéré une tentative d'exploitation de PHP2Shell le 17 octobre 2026, soit quatre jours avant la sortie des correctifs pour ces failles critiques.
Le post PHP2Shell : les attaquants avaient quatre jours d’avance sur le correctif a été publié sur IT-Connect.
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level...
Un compte d'accès du LOOF a permis d'extraire 2,9 millions d'enregistrements du fichier I-CAD : noms des détenteurs de chats et identification des animaux.
Le post Fuites I-CAD : 2,9 millions de fiches de chats volées, avec le nom de leurs propriétaires a été publié sur IT-Connect.
Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the...
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in IMAP command injection, cross-site scripting, SSRF bypass, email header injection, css property injection, remote content blocking bypass, information disclosure or...
The headline-grabbing bugs known colloquially as PHP2Shell are giving cyber analysts a lot to track — and a lot to debunk.
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the release of Virtual Patching, a new capability that...
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But one of the lesser-known stories centers around disclosure.
According to The PHP Foundation, sev...
De multiples vulnérabilités ont été découvertes dans les produits Papercut. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
SIEM-less security may sound like an escape from traditional SIEM complexity and costs, but the underlying capabilities still have to exist somewhere.
De multiples vulnérabilités ont été découvertes dans les produits SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.