> TODAY'S SUMMARY (78 articles)
Today's cybersecurity landscape reveals significant threats and vulnerabilities. A troubling report indicates that White House network addresses were exploited by multiple residential proxy services, raising concerns about data security. Attackers are actively probing for a recently identified remote code execution (RCE) vulnerability in WordPress, highlighting ongoing risks in widely used platforms. A zero-day vulnerability in Zyxel switches has been exploited despite previous patches failing to address the issue, putting numerous devices at risk. Meanwhile, the Indian CERT warns of AI-driven cyberattacks targeting fintech and crypto sectors. Additionally, phishing scams exploiting popular culture, such as the upcoming GTA 6 release, continue to proliferate, indicating a shift in tactics among cybercriminals. Organizations are urged to bolster their defenses against these evolving threats.
|
// AI-powered summary generated at 16:00
Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 156.0.8078.47-1~deb13u1.
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.
The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42.
La Commission de protection des informations personnelles (PIPC) de Corée du Sud a appelé les responsables de traitement à prendre des mesures préventives suite à la découverte d'une vulnérabilité de sécurité critique dans le logiciel PHP.La vulnérabilité, nommée "PHP2Shell" et révélée le 21 octobre...
La présidente de la Commission Nationale de Protection des Données (CNPD) portugaise a participé à l'inauguration d'une exposition célébrant le 50ème anniversaire du Médiateur de la République.L'événement, qui s'est tenu le 15 octobre 2026 au Palais Vilalva, a marqué le lancement de l'exposition "Te...
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.
One of them, ZDI-CAN-33774, can be triggered before any network authentication. The...
L'autorité polonaise de protection des données (UODO) annonce la tenue d'une conférence en ligne sur l'articulation entre la liberté de la recherche scientifique et la protection des données personnelles.Cet événement, intitulé "Données de recherche, données personnelles. La liberté de la recherche...
L'Autorité polonaise de protection des données personnelles (UODO) a annoncé la poursuite de son initiative "L'UODO en tournée nationale" avec des visites prévues dans les voïvodies de Lublin et de Sainte-Croix.Cette campagne, lancée en septembre 2024, vise à sensibiliser les citoyens, les entrepris...
Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
The post The Current Landscape of OAuth Attacks appeared first on Unit 42.
L'Autorité de protection des données belge a classé sans suite une plainte relative à la gestion des témoins de connexion (cookies), les faits initiaux étant prescrits. Elle a néanmoins profité de cette décision pour rappeler les exigences de validité du consentement, notamment l'obligation d'offrir...
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
OpenVPN could allow unintended access to network services.