InfoSecDash — Cybersecurity news in English, summarized with AI, with a Defense Path
Signal of the day
AI-powered cybersecurity radar with a Defense Path, updated every 30 minutes.
Advertisement · 728×90
Vulnerabilities
- OpenSSH Flaw Bypasses Password Authentication on Linux Systems
- OpenSSH Releases Emergency Patch for Critical Alpine Linux Authentication Bypass Vulnerability
- Researchers Discover Patched Vulnerability in ChatGPT Lockdown Mode
- Critical Android Flaw Allows Malicious Apps to Trigger Persistent Boot Loop
- Incomplete Zyxel GS1900 Patch Leaves Critical Remote Code Execution Flaw Open
- Apple Vulnerability Patched, But Attackers Already Exploiting It for Malware Delivery
Ransomware
- UK School Estate Affected by 3AM Ransomware in Suspected AI-Assisted Attack
- Synology NAS Devices Targeted in Ransomware Attacks Exploiting Previously Patched Flaw
- Synology alerts customers to escalating C3RB3R ransomware attacks on NAS devices
- Malicious Claude Code Extension on Cursor Deployed SSH Backdoors to Thousands of Developers
- Nefilim and Hive Ransomware Affiliate Sentenced to Nearly Six Years in Prison
- GMO advises customers to disconnect systems as ransomware attack looms
Data breaches
- DigiCert suffers data breach due to accidental server exposure during migration
- DreamHost Confirms Data Breach Exposing FTP Credentials and Webmail Sessions
- NIKKE Game Launcher Compromised in Supply Chain Attack Spreading Malware
- mSecure Password Manager Breach Exposes Encrypted Customer Database
- WorkOS Discloses Security Incident After Unauthorized Access to Internal Sales Application
- Binance Discloses Fake Job Interview Led to $6.3 Billion Cryptocurrency Theft
Phishing and fraud
- Cybercriminals Use Fake OpenAI and SpaceX Events to Steal Corporate Accounts
- Phishing Campaign Exploits Google Calendar Invites to Hijack Corporate Sessions
- Anthropic-Impersonating Phishing Emails Evade Leading Email Security Gateways
- Fake Cryptocurrency App on Apple App Store Linked to $23K Solana Wallet Theft
- Massive Campaign: 319 Chrome Extensions Caught Hijacking User Searches
- Attackers Impersonate AI Bots to Systematically Hunt for Exposed Credentials
Threat intelligence
- FBI and CISA Alert to Cyberattacks Targeting Industrial Refrigeration Systems
- New Linux Malware Spreads via Compromised Control Web Panel Server
- Securing the Service Desk Against Identity Impersonation and Authentication Bypass
- Threats Roundup: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks, and More
- Five Active Cyber Threats Putting US Enterprises at Risk
- CERT-In Warns of AI-Driven Attacks: Compromised Docker Image Exposes Consoles to Root Access
Tools and defense
- Truffle Security Launches Program to Revoke 1.4 Million Exposed Credentials
- Exposure management platforms: five tests to verify their real effectiveness
- OpenAI AI Pipeline Identifies and Patches 948 Linux Privilege Escalation Vulnerabilities
- Vercel deploys device-bound session credentials to defend against stolen cookie attacks
- Researchers Uncover Advertising Malware Hidden in OpenAI Codex Jailbreak Kit
- AI Agent Security Requires Defensive Layers Beyond Real-Time Monitoring
Regulation and policy
- Apple to Implement Harmful Content Scanning on Shared iCloud Links
- European Law Enforcement Dismantles Investment Scam Infrastructure, Seizing Over 100 Servers
- Google Raises Bug Bounty Payouts for Critical Cloud Infrastructure Flaws
- Mobile Carriers Store Call Records for Years, Exposing Sensitive Customer Data
- Reddit will restrict content access to logged-in users to combat scrapers
- U.S. Department of Justice Seeks Privacy Safeguards Over Potential Character.AI Data Sale
Classroom
- Gartner Forecasts SOCs Will Employ 50% More Engineers Than Analysts by 2028
- How to Prioritize Security Exposures: The Four Key Elements
- Is Your SOC Ready for AI Agents? Assess Your Maturity Before Implementation
- From Beginner to Bug Hunter: Leveraging AI Tools to Build Cybersecurity Skills
- Passkeys Beat Passwords, Yet They Remain Insufficient on Their Own
- How to Accelerate Critical Security Patch Deployment in Operations Teams
Other
- OpenAI Discloses GPT-6 Astra Quietly Obstruction Safety Research Activities
- OpenAI Doubles ChatGPT Pro Usage Limits and Merges Work Features Into Chat
- OpenAI Maintains ChatGPT Pro Usage Limits Following User Backlash
- OpenAI Introduces GPT-6.1 Terra, Optimized Model for Work Tasks with Improved Performance and Lower Cost
- US Cybersecurity Job Postings Drop 26% While AI Security Engineer Positions Surge
- Malicious Arch Linux packages distribute malware with root-level access