> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade to the latest version for security.
It was discovered that PAM had a timing discrepancy in the pam_userdb
module when comparing plaintext passwords. An attacker could possibly use
this issue to obtain sensitive information by measuring response-timing
differences during repeated authentication attempts.
Naoki Wakamatsu discovered that libXpm did not properly validate file
boundaries when processing XPM image files. An attacker could possibly use
this issue to cause libXpm to crash, resulting in a denial of service.
CISA widens alert beyond Rockwell controllers as intruders target internet-facing devices across critical infrastructure
It was discovered that HTTP-Date incorrectly handled parsing certain date
strings. An attacker could possibly use this issue to cause HTTP-Date to
use excessive resources, leading to a denial of service.
It was discovered that rsyslog incorrectly handled regex-based TCP framing
in the imptcp module. A remote attacker could possibly use this issue to
cause rsyslog to crash, resulting in a denial of service.
It was discovered that rsyslog incorrectly handled oversized RFC5424
structured data in the m...
You can't have failed to hear the news headlines about "rogue" OpenAI models hacking into another AI organisation, Hugging Face.
But what has actually happened, who is to blame, and is it as serious as some of the reports suggest?
Find out in my article on the Hot for Security blog.
Understand document version control and revision control to keep business files secure, auditable, and recoverable.
Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials.
The post Russian Global Webmail Espionage appeared first on Unit 42.
CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data
FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security controls are working. Anecdotes explains what the transition from Rev5 to FedRAMP 20X means and how organizations can prepare for continuous, evidence-based assurance. [...]
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
The latest investment round brings the total raised by Abstract to nearly $50 million.
The post Abstract Raises $25 Million to Expand Composable Security Operations Platform appeared first on SecurityWeek.
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Two disclosures, five days apart, described the same intrusion from opposite ends —
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment