Posts of last few hours

[Control Systems] Moxa security advisory (AV26-995)
https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-995
GitLab security advisory (AV26-994)
https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-994
The legal questions raised by agentic AI hacks

Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under existing laws and regulations.

The post The legal questions raised by agentic AI hacks appeared first on CyberScoop.

https://cyberscoop.com/ai-agent-hacks-legal-liability-cfaa/
[Control systems] Hitachi security advisory (AV26-993)
https://cyber.gc.ca/en/alerts-advisories/control-systems-hitachi-security-advisory-av26-993
Российскому ИТ готовят ещё один налоговый сюрприз. Минцифры просит не спешить
Главный спор разгорелся вокруг компаний, которые создают технологии преимущественно для собственных банков, операторов, маркетплейсов и холдингов.
https://www.securitylab.ru/news/578246.php
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.
https://www.darkreading.com/cybersecurity-operations/kiteworks-citrix-incidents-challenges-zero-day-response
SWIFT Banking & Government Middleware Enables RCE
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
https://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce
GPS можно глушить сколько угодно: гиперзвуковому оружию дадут собственное зрение
Разработчик обещает автономное наведение на огромных скоростях.
https://www.securitylab.ru/news/578203.php
Is Your Organization Ready for 2027's AI Accountability Era?
Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahead.
https://www.darkreading.com/cybersecurity-operations/is-your-organization-ready-for-2027-s-ai-accountability-era-
Is It Fair to Blame 'Rogue' AI for Security Failures?
"Rogue AI" terminology anthropomorphizes LLMs and shifts risk responsibility from vendors. Defenders should treat agents as untrusted, nondeterministic software systems, not sentient beings with malicious intent.
https://www.darkreading.com/insider-threats/blame-rogue-ai-security-failures
Рукопожатие пошло не по плану. Ошибка OpenSSL превратила повтор DTLS-сообщения в утечку памяти
Сбой возник там, где библиотека должна была спокойно пережить потерю данных.
https://www.securitylab.ru/news/578185.php
Восемь копий, каждая чинит остальные. Сайты на WordPress атакует самовосстанавливающийся бэкдор
Обычная очистка здесь превращается лишь в короткую передышку перед новым заражением.
https://www.securitylab.ru/news/578183.php
MikroTik security advisory (AV26-992)
https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-992
AI Agents Attempt SQL Injection While Searching Government Data
AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence of compromise. Autonomous AI agents, working on what looks like ordinary data retrieval tasks, ended up throwing basic hacking attempts at a U.S. Department of Education site and Library and Archives Canada. Nobody told them […]
https://securityaffairs.com/200234/ai/ai-agents-attempt-sql-injection-while-searching-government-data.html
Пароль больше не нужен: критическая дыра в TrueConf отдаёт сервер атакующему
Уязвимость с оценкой 9,8 затрагивает версии с 4.5.0.15891 по 5.5.5.10304 и требует срочного обновления.
https://www.securitylab.ru/news/578245.php
Mississippi mayor says ransomware incident led city to shut down systems
Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.
https://therecord.media/vicksburg-mississippi-government-ransomware-attack
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.
https://therecord.media/warlock-ransomware-used-in-critical-infrastructure-attacks
Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Hackers turned a Microsoft SQL Server into a channel for running commands and moving collected files in an intrusion linked to a Viva Aerobus environment. Their own publicly accessible server then exposed attack tools and stolen material to unrelated internet users. The activity, observed between September 25 and 29, 2026, involved credential harvesting, source code […]

The post Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel appeared first on Cyber Security News.

https://cybersecuritynews.com/hackers-turned-a-microsoft-sql-server/
Vulnerability Backlogs Are an Ownership Problem
Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.
https://www.darkreading.com/cybersecurity-operations/vulnerability-backlogs-ownership-problem
Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials

Hackers are turning trusted software updates into a route for stealing developer and cloud credentials. Recent supply chain incidents show how a single altered package, build action, or publishing token can place malware inside routine development workflows. The risk is not limited to one product or programming community. After obtaining a maintainer token or access […]

The post Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials appeared first on Cyber Security News.

https://cybersecuritynews.com/hackers-poison-trusted-software-updates/

Managed ad