IT Security News: today roundup
- Microsoft patched nearly 1,000 software vulnerabilities in its September update, including two actively exploited Windows zero-days.
- Red Hat detailed methods for platform engineers to verify Kubernetes network policy enforcement within OpenShift zero-trust environments.
- The FBI released its inaugural cyber strategy, prioritizing proactive operations to disrupt malicious threat actors.
- Anthropic warned that artificial intelligence is becoming integrated into operational machinery for cybercrime, propaganda, and weapons development.
- CISA added five actively exploited vulnerabilities in JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its KEV catalog.
- Security researchers evaluated existential risks posed by future artificial intelligence models while emphasizing current threats remain low.
- Nintendo warned that local attackers can exploit a QR code feature on original Switch consoles to execute code.
- Security flaws in VLC Media Player allow malicious media files to corrupt heap memory or leak sensitive information.
- Researchers identified MantaxOtax, new Android malware targeting Indonesian users by combining aggressive spyware with file-encrypting ransomware capabilities.
- Binghamton University researchers applied information theory to create a mathematical Wordle strategy achieving a 99 percent success rate.
Sources
- Microsoft Patches Nearly 1,000 Vulnerabilities in September Update
- Closing the loop: From network policy intent to verified reality
- FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors
- Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
- Will AI kill us all within the next decade?
- Nintendo Switch Security Flaw Lets Nearby Attackers Exploit QR Codes Used to Share Screenshots
- Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory
- MantaxOtax Android Malware Merges Ransomware and Spyware in New Indonesian Campaign
- Researchers find a Wordle strategy that wins 99% of the time