> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
MDASH stuffed with MAI-Cyber-1-Flash and a side of GPT-5.4
EFF’s first EFFecting Change livestream was all the way back in July of 2024. Maybe you've caught each stream, or maybe you’ve only caught a few. Or maybe you’re like me and prefer to listen to conversations like these on your daily commute! Either way, if you want to stay on top of these monthly co...
Microsoft has introduced MAI-Cyber-1-Flash, a security-focused AI model built into MDASH, the company’s multi-agent vulnerability identification and remediation system. MAI-Cyber-1-Flash is Microsoft’s first model built specifically for cybersecurity work, and the company stated that it went through...
We break down how ClickFix works on macOS: why attackers trick users into running commands in Terminal, what data the malware steals, and how to protect your device.
Application-layer distributed denial of service (DDoS) attacks are difficult to detect because they closely resemble legitimate traffic. HTTP request floods are now among the most common vectors targeting web applications, using valid-looking requests that blend in with normal user activity. In June...
A newly uncovered ad fraud campaign is spreading Android apps that display full-screen ads every time you end a phone call.
Microsoft bolstered its AI cybersecurity offerings this week with the launch of its first AI security model and a new security platform.
Why wait months for digital evidence when answers could start at the point of contact? Discover how Cellebrite Kiosk helps teams move investigations forward faster.
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents.
The 37-member group spans cloud, security, enterprise software, and AI companies, including Microsof...
MedusaHVNC RAT uses hidden Windows desktops to remotely control browsers, steal data, and evade detection through legitimate system features. Windows has always supported hidden desktops as a legitimate feature, useful for specialized software that needs a workspace the user never touches. It’s a ni...
The alleged hacking by officials in Bahrain “allowed access to and exfiltration of information on the computers, interception of communications conducted using the computers and use of the computers’ microphones and cameras to surveil the respondents,” according to the court opinion.
On Sunday, AnMed published a statement online saying they were “experiencing a cybersecurity disruption involving malware” and were working to restore systems and determine the scope of the incident.
Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store. [...]
APT-number conventions are out, cryptonyms are in, and security teams now have one more naming system to keep straight.
The post Google’s solution to hacker name confusion? Yet another naming system appeared first on CyberScoop.
Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt.
CNCERT, Ch...
Ubuntu issued a security notice for FreeIPMI vulnerabilities affecting various LTS versions, detailing potential denial of service risks from buffer overflow issues and recommending updates.
Un ancien député-maire est ciblé par un pirate opposé à Chat Control, avec la republication annoncée de données trés intimes.
L'autorité italienne sanctionne un éditeur de presse pour avoir diffusé des données de santé et l'identité d'une personne simple témoin dans une affaire judiciaire, jugeant que ces informations n'étaient pas indispensables à l'information du public et violaient les principes de licéité et de minimis...
L'autorité polonaise de protection des données (UODO) a participé à l'inauguration du Comité de programme de l'Année de la sensibilisation et de la sécurité de l'information, une initiative du Sénat polonais.Le 23 juillet 2026, le Sénat a lancé cette initiative pour l'année 2027, visant à développer...
Why security needs a new Cyber Stack — Introducing Project Perception The physics of cybersecurity are changing. Autonomous systems can now reason, adapt and operate continuously. At the same time, the cost of offense is falling, while the volume, velocity and complexity of what must be secured cont...