> TODAY'S SUMMARY (78 articles)
Today's cybersecurity landscape reveals significant threats and vulnerabilities. A troubling report indicates that White House network addresses were exploited by multiple residential proxy services, raising concerns about data security. Attackers are actively probing for a recently identified remote code execution (RCE) vulnerability in WordPress, highlighting ongoing risks in widely used platforms. A zero-day vulnerability in Zyxel switches has been exploited despite previous patches failing to address the issue, putting numerous devices at risk. Meanwhile, the Indian CERT warns of AI-driven cyberattacks targeting fintech and crypto sectors. Additionally, phishing scams exploiting popular culture, such as the upcoming GTA 6 release, continue to proliferate, indicating a shift in tactics among cybercriminals. Organizations are urged to bolster their defenses against these evolving threats.
|
// AI-powered summary generated at 16:00
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
Two vulnerabilities were discovered in aide, an advanced intrusion detection system, which could allow a local user to bypass the detection of malicious files. For the stable distribution (trixie), these problems have been fixed in version 0.19.1-2+deb13u5.
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when along with an announcement that it will pause operations.
zlib could be made to crash or run programs if it received specially crafted input.
China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain...
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) pose a risk to home users and their data. We explain the danger and how to stay protected.
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions.Â
The most serious of the security issues, labeled critical in s...
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
Ali Firas discovered that zlib incorrectly handled certain non-blocking
write operations. An attacker could possibly use this issue to trigger a
heap buffer overflow, resulting in a denial of service or arbitrary code
execution.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22.
The flaw lets anyone who can log in to the orchestrator, even with a read-only customer accoun...
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.
Attackers are increasingly focusing on a limited range of critical vulnerabilities to run attacks with flaws packaged into exploits within as little as three days.
Rapid7’s latest Quarterly Threat Landscape report found the number of newly exploited vulnerabilities in Q3 of...
A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 of 10), in Signal ’s calling library could allow a malicious caller to interfere with call terminat...
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates.
eMudhra said it will replace af...
The Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP.
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't ev...
One of the bill’s sponsors told CyberScoop it’s “incredibly expensive” for U.S. AI companies to stay ahead and distillation attacks incentivize stealing over innovation.
The post Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber a...