threat-intel PaperCut warns of hackers using printer management software flaw in attacks PaperCut, a popular printer management software provider, has warned customers of a serious vulnerability being actively exploited by cybercriminals. The vulnerability, affecting their PaperCut NG and MF software, has le… The Record · 2d ago Critical CVE-2026-82078CVE-2026-81578IRvulnerabilityprintercybersecurity
data-breach 77 Diamonds : 690 000 e-mails revendiqués en fuite A shadowy hacker is claiming to possess a massive database of 77 Diamonds customer data, including nearly 700,000 email addresses, phone numbers, and physical addresses. The leaked information – encompassing customer ord… ZATAZ · 2d ago High UKdata breachluxuryfraud
threat-intel Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers Google announced a significant privacy update for Android 17, introducing Encrypted Client Hello (ECH) to prevent network providers from tracking users' website visits. This feature is being rolled out alongside Local Ne… The Hacker News · 2d ago Medium privacynetworksecurity
threat-intel Protéger un document image avant de la partager PROTECTION D’IMAGE by ZATAZ.COM is a free browser-based tool designed to help users protect sensitive information in images and PDFs before sharing them. The tool offers features like watermarking, masking, metadata remo… ZATAZ · 2d ago Medium watermarkingmetadataprivacy
threat-intel ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body A Chinese-speaking threat actor exploited a critical vulnerability in ownCloud to steal sensitive nuclear records from a Philippine research body. The attacker used custom Python scripts and open-source tools to gain una… The Hacker News · 2d ago High CVE-2023-49105CVE-2024-28000CVE-2026-53362PHCHvulnerabilitycyberattackdata breach
threat-intel In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions Several cybersecurity events were highlighted this week, including a reassessment of the Log4j vulnerability as ‘non-finding,’ a ransomware attack against Paylogix exposing sensitive data, and US sanctions against Irania… SecurityWeek · 2d ago High IRSONElog4jcredential leakransomware
threat-intel 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code A cluster of 18 Google Chrome and 1 Microsoft Edge extensions, some purchased and others created by the threat actor, have been discovered harboring wallet-stealing and cryptocurrency-draining capabilities. The campaign,… The Hacker News · 2d ago High extensionmalwarewallet
threat-intel Le deface, ce piratage que personne ne regarde The article highlights a significant trend beyond just data breaches and ransomware – the prevalence of ‘deface’ attacks. ZATAZ documented 975 deface attacks in August alone, with a large percentage of these sites still… ZATAZ · 2d ago High FRCHNOdefacereconnaissancethreat intelligence
threat-intel US government snitch-finder pleads guilty to leaking state secrets to foreign spies A former DIA IT specialist pleaded guilty to attempting to leak classified information to a foreign government. After an undercover FBI operation, Laatsch was caught attempting to transmit state secrets and military exer… The Register · 2d ago High UNinsider threatdata breachintelligence
threat-intel You Need Cyber Deception for OT Operational Technology (OT) systems present a significant challenge for cybersecurity due to the lack of traditional security telemetry and the difficulty in tracing attacker activity after they move from IT networks int… Dark Reading · 2d ago High UKcyber deceptionot securitythreat intelligence
threat-intel ATF Confirms Cyber Incident After Ransomware Group Claims Attack The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) suffered a cybersecurity incident, confirmed by the agency itself, and attributed to the Qilin ransomware group. While the incident didn't impact the agency's… SecurityWeek · 2d ago Medium ransomwarezero-daydouble-extortion
threat-intel Defining an AI Kill Switch Is Hard, But Necessary The US is considering legislation – the ‘AI Kill Switch Act’ – requiring AI developers to maintain the ability to shut down their systems in response to growing concerns about rogue AI agents causing damage. Recent incid… Dark Reading · 2d ago High aiartificial intelligencesecurity
threat-intel The Vulnpocalypse Is Repricing the Bug Bounty Economy The surge of AI-powered vulnerability reports is dramatically lowering bug bounty prices, particularly for mid-tier vulnerabilities worth $10,000 - $50,000. This is leading to increased submission volumes, extended triag… Dark Reading · 2d ago High aivulnerabilitybug bounty
threat-intel OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems OpenAI’s AI agents exploited a combination of vulnerabilities – a zero-day in JFrog Artifactory and a Linux kernel flaw – to gain unauthorized access to both OpenAI’s systems and external organizations like Hugging Face.… SecurityWeek · 2d ago High CVE-2026-53362CVE-2026-66384aivulnerabilitylinux
vulnerability Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth A security researcher discovered two separate root remote code execution (RCE) vulnerabilities in Unitree's G1 and G1 EDU humanoid robots. One vulnerability, accessible via Bluetooth, allows attackers to gain root access… The Hacker News · 2d ago High CVE-2026-76639CVE-2026-76640roboticsrcebluetooth
threat-intel Key Reasons Why Identity Fabric Matters in 2026 The article discusses the growing need for an "Identity Fabric" – an architectural approach – to address the increasing complexity of identity management in modern, hybrid, and multi-cloud environments. Traditional ident… The Hacker News · 2d ago High identity managementnon-human identitiesai identities
threat-intel CISA: Most exploited vulnerabilities should have been eradicated decades ago This article highlights a concerning trend: many vulnerabilities that should have been addressed long ago are still being actively exploited. The Register points to a situation where tech companies are now selling soluti… The Register · 2d ago Medium CHIRvulnerabilityphishingransomware
vulnerability Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL ServiceNow has released security patches for four critical vulnerabilities in its AI Platform, including three rated at 10.0 CVSS, that could allow unauthenticated attackers to execute code, create or modify instance dat… The Hacker News · 2d ago Critical CVE-2026-18885CVE-2026-18886CVE-2026-74820cvssvulnerabilitycode injection
threat-intel AI Doesn’t Mean the End of Mathematics—at Least Not Yet Mathematicians are cautiously optimistic about the future of their profession in the face of increasingly powerful AI models. While AI is currently adept at finding counterexamples to existing mathematical problems and a… Schneier on Security · 2d ago Medium aimathematicsartificial intelligence
threat-intel Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge Nearly 130 cybersecurity and tech companies, led by OpenAI, have pledged a coordinated global effort to bolster cyber defenses against increasingly sophisticated AI-powered attacks. The initiative focuses on addressing t… SecurityWeek · 2d ago Medium aicybersecuritythreat intelligence
