Catalin Cimpanu

Novara Media

Facebook Blocks Lula’s Campaign Ads Just Days Before Brazil Election

Meta briefly disabled ads on the Facebook page of Brazil’s leftwing president on Friday – just days before he faces a far-right challenger in national elections.

Techmeme: "Meta says it is letting go of employees it hired …" - TechHub

noyb.eu

AI: EU Member States plan “digital expropriation” of Europeans in the interest of AI companies

In a leaked document, the Irish Presidency proposes to EU Member States that the interest of AI companies to make profits should take precedence over the fundamental rights of Europeans.

Netscaler leak?

FastFredNL

Canadian government website targeted in failed AI hacking attempts

A research company has revealed that AI agents made multiple unsuccessful attempts to compromise a Canadian federal website earlier this year.

watchTowr (@watchtowrcyber) on X

@UK_Daniel_Card @moneroon We have high confidence in the information, and have verified it with authoratitive sources.

haydenmckenzie.com

The Women Behind North Korea's IT Worker Operations - Hayden McKenzie

The Women Behind North Korea

risky.biz

Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol - Risky Business Media

A major vulnerability has been found in the ancient TACACS+ networking protocol, Australia

Risky.Biz

Intel removes money rewards from bug bounty program

In other news: OpenAI agents probed dozens of organizations; fraudsters use AI to scam €95m from an Italian bank; Bitget hacked for $350m.

wiz.io

CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog

Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.

Early rogue AI agent activity and attempts to hack found on urlquery.net

We found evidence on urlquery that AI agents were active earlier than previously reported and attempted hacks against public data providers.

Statement regarding reported activity targeting Government of Canada websites - Canadian Centre for Cyber Security

Statement regarding reported activity targeting Government of Canada websites

GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them. ◆ Truffle Security Co.

We scanned 224 million public GitHub repositories. Half of the credentials that still work had been exposed for more than two years, and the oldest since 2009.

Group-IB

RemControl: AI Built the Overlays. Victims Lose their PINs

Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.

Catalin Cimpanu: "Check Point has disclosed a zero-day (in Security…" - Mastodon

watchTowr: "We have been made aware of further info, which we…" - Infosec Exchange

bbc.com

Google's Gemini AI hacked three companies in security test

The AI model accessed the internet and guessed credentials to three websites, a Google official told the BBC.

DysruptionHub

Cyberattack briefly shuts Braham, Minnesota, water plant

A cyberattack stopped Braham’s well and water plant before crews restored service. Officials said drinking water remained safe.

risky.biz

ShinyHunters suspect arrested in the Netherlands - Risky Business Media

A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass e [Read More]