Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The Bad Epoll flaw resides within the epoll subsystem of the Linux kernel, a fundamental component for managing network connections and file events.

The defacement targeted error pages on U.S. Army websites, including oil.army.mil and ai2c.army.mil, which belong to the Army’s Open Innovation Lab and Artificial Intelligence Integration Center, respectively.

The threat cluster, dubbed Cavern Manticore by Check Point Research, exhibits tactical similarities with known groups like MuddyWater and Lyceum.

The deepfake image, which depicted Paul Thwaite alongside journalist Emily Maitlis and was designed to mimic a BBC radio interview, was shared on the social media platform X.

The supermarket chain is tripling the number of stores utilizing facial recognition, expanding from over 55 current locations to a projected 200 by year-end.

HiAnime, which operated under various domains including Zoro.to and Aniwatch, provided free access to a vast library of anime, attracting hundreds of millions of monthly visitors and briefly surpassing legal streaming platforms in web traffic.

Microsoft has introduced an in-meeting toggle for licensed organizers and presenters to control "Meeting AI" features during live calls.

The CSE's annual report details three foreign "active cyber operations" targeting threats to Canadian national security.

The breach, initially disclosed by MBI in June, saw ShinyHunters leak the stolen data after the Christian college apparently did not meet their extortion demands.

Washington state's chief information security officer, Ralph Johnson, announced his departure from his role in September.