> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or Edge on the victim machine and controls it through Chrome DevTools Protocol, a debu...
Reconstruct Synology SHR and SHR-2 automatically, browse evidence before imaging, and acquire only the files you need with Atola TaskForce 2.
Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets
Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.
The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.
The government spent the past two decades learning what private sector partners have always known: cyber resilience requires everyone in the room. ANCHOR-CI is proof that the lessons may finally stick.
The post ANCHOR-CI could fix 20 years of broken government-industry collaboration appeared first o...
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video.
The selfie for sign-in, per the tech giant, is another option on top of existing recovery methods to log in to an account, including an email address or a phone number. The idea is to...
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]
He replaces Guy Rosen, who announced his retirement from the company after 13 years.
The post Assaf Keren Appointed New CISO of Meta appeared first on SecurityWeek.
The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. “This change will protect Python users and reduce the amount of “cleanup” wo...
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday. [...]
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.
The post New Check Point Zero-Day Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Microsoft va faire des passkeys la méthode par défaut dans Entra ID et retire l'authentification par SMS et appel vocal. Calendrier, impact et alternatives.
Le post Microsoft 365 : la fin de l’authentification MFA par SMS et appel au profit des passkeys a été publié sur IT-Connect.
Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Stadler operates 16 production and component plants and eight engin...
Cloudflare a analysé le trafic HTTP mondial pendant la Coupe du monde 2026. Décalage horaire, streaming, paris en ligne : voici ce que révèlent ses données.
Le post Coupe du monde 2026 : comment Cloudflare a vu le Mondial redessiner le trafic Internet a été publié sur IT-Connect.
En moins d'une semaine, Joshua Boniface, Anthony Lavado et Andrew Rabert ont quitté Jellyfin. Burn-out, code IA, gouvernance : ce que l'on sait.
Le post Open Source – Jellyfin : trois départs majeurs, entre burn-out et tensions autour de l’IA a été publié sur IT-Connect.
Ubuntu released a security notice addressing multiple vulnerabilities in the Linux kernel affecting Ubuntu 20.04 LTS, necessitating immediate updates and potential recompilation of third-party kernel modules.
La CVE-2026-8933 est une faille dans snap-confine qui donne à un utilisateur local un accès root sur Ubuntu. Voici comment se protéger.
Le post Accès root : une faille dans snap-confine expose les machines Ubuntu a été publié sur IT-Connect.
GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, 2026. Reports submitted before that date will be honored under the previous bounty structure. “Alongsid...
Check Point addressed a critical authentication bypass flaw, tracked as CVE-2026-16232, in SmartConsole that is being actively exploited. Check Point has released security updates to fix multiple vulnerabilities, including CVE-2026-16232 (CVSS score of 9.3), a critical authentication bypass flaw aff...