🚨 CISA KEV 1[−]
20 Sep KEVU.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalogU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities …SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 5[−]
20 SepClaude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained FlawsThree researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that run…THEHACKERNEWS.COM
20 SepDefending Space as Critical Infrastructure.Space infrastructure has become an increasingly important part of everyday life, which has also made it an increasingly attractive target for exploitation. Host Maria Varmazis and Sean MacKirdy, Area Vice President for the National Security vertical at Elastic Government Solut…THECYBERWIRE.COM
20 SepWeek in review: Cisco patches exploited email gateway 0-day, Revolut breachHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from …HELPNETSECURITY.COM
20 SepSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click Backdoor Red Heron exploits Gitea n-day flaw in multinational campaign, ex…SECURITYAFFAIRS.COM
20 SepAI Hallucinations Nearly Triggered a US-China Military ConfrontationAn AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation during the Iran war. According to CNN, four sources familiar with the episode say an intelligence report circulated through the military claiming a Chinese …SECURITYAFFAIRS.COM
🔥 INCIDENT REPORTING 1[−]
20 SepCyberWire Daily at 10: Critical infrastructure attacks over the last 10 years.In this Special Edition episode, Maria Varmazis and Dave Bittner from N2K Cyberwire get back together to reflect on the past decade of critical infrastructure attacks, evolving threats, and lessons learned from incidents like the Ukraine power grid attack and Colonial Pipe…THECYBERWIRE.COM
🕵️ THREAT INTELLIGENCE 1[−]
20 SepMalicious npm packages evade install-script defenses at runtimeAn ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts. [...]BLEEPINGCOMPUTER.COM
📰 CYBERSECURITY BRIEFINGS 1[−]
20 SepStandardizing space cybersecurity.This week on T-Minus: Space-Cyber Briefing: we dive deeper into how stronger cybersecurity standards are necessary for the space sector and what tools are already in place that can serve as a starting point.THECYBERWIRE.COM
📡 INFOSEC NEWS 2[−]
20 SepSecurity Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITIONA new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Google Gemini also Broke Out of I…SECURITYAFFAIRS.COM
20 SepResearchers escape OpenAI Codex sandbox to run commands on hostResearchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both. [...]BLEEPINGCOMPUTER.COM