Tin tức an ninh mạng
Tự động tổng hợp từ báo trong nước và các trang bảo mật quốc tế, bấm vào tin để đọc bài gốc. Cập nhật 21 phút trước.
🌐
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
🌐
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
🌐
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
🌐
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
🌐
Vulnerability Management Isn't About the Score — It's About How It Applies to You
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
🌐
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
🌐
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
🌐
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
🌐
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
🌐
Russian Influence Operation Widely Targets Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
🌐
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
🌐
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.