TheNde
Sicurezza· · 2 min

NASA's Vulnerabilities in Space.

Cybersecurity is buzzing with critical vulnerabilities and innovative attacks. From NASA's command vulnerabilities to AI-driven threats targeting Siemens PLCs, today's news highlights the urgent need for better defenses. Let's dive into the latest breaches, patches, and threats that could affect you.

In breve
  1. NASA's Vulnerabilities in Space
  2. Malicious Android Attacks on the Rise
  3. Exploits and Vulnerabilities Galore
01 · Sicurezza

NASA's Vulnerabilities in Space

NASA's command vulnerabilities could be exploited.
NASA's command vulnerabilities could be exploited.

NASA's AIT-GUI flaws could allow unauthorized attackers to issue commands to spacecraft. This could have severe implications for mission integrity. As we push further into space, securing these systems is more critical than ever.

02 · Sicurezza

Malicious Android Attacks on the Rise

Malicious Android malware is ramping up.
Malicious Android malware is ramping up.

ToxicPanda 2.0 and Manic malware are expanding their reach within Android banking apps. These threats can steal user credentials through overlays and remote access. It's a wake-up call for mobile users to stay vigilant.

03 · Sicurezza

Exploits and Vulnerabilities Galore

CISA warns of critical MLflow vulnerability exploitation.
CISA warns of critical MLflow vulnerability exploitation.

CISA warns that hackers are exploiting a critical MLflow vulnerability, allowing unauthorized access to internal services. Meanwhile, a critical Zimbra flaw is being actively exploited, highlighting how quickly attackers can take advantage of new weaknesses. Organizations must patch these vulnerabilities immediately.

04 · Sicurezza

The Rise of AI-Driven Attacks

AI is reshaping the cybersecurity landscape.
AI is reshaping the cybersecurity landscape.

Hackers are increasingly using AI to target critical infrastructure, particularly Siemens PLCs. This trend emphasizes the need for robust defenses in industrial sectors. AI is now both a tool for attackers and defenders.

05 · Sicurezza

Phishing Campaigns Targeting Cybersecurity Pros

Phishing campaigns are still a threat to cybersecurity professionals.
Phishing campaigns are still a threat to cybersecurity professionals.

A persistent phishing campaign is targeting attendees from major cybersecurity conferences. These attacks highlight the ongoing threat even in security-focused circles. Awareness is key to avoiding these traps.

Numeri chiave
400

Microsoft patched 400 vulnerabilities in the August 2026 updates alone.

Fonte
30 million

MLflow has over 30 million monthly downloads, making it a prime target for exploits.

Fonte
140+

ToxicPanda 2.0 targets over 140 banking and crypto applications.

Fonte
In primo piano
The Hacker News

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

NASA's AIT-GUI vulnerabilities could allow unauthorized users to send commands to spacecraft. This raises serious questions about the security of space missions.

Bleeping Computer

Critical Zimbra RCE Flaw Now Actively Exploited in Attacks

A critical vulnerability in Zimbra Collaboration Suite is being exploited, allowing unauthenticated remote code execution. Organizations using Zimbra must act quickly to patch this flaw.

Security Week

Hackers Using AI to Target Siemens PLCs in Critical US Sectors

AI-driven attacks are targeting Siemens PLCs in critical infrastructure sectors. The potential impacts include severe disruptions and risks to public safety.

Link rapidi
  1. 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsA new batch of malicious Firefox extensions masquerades as Web3 tools to steal crypto wallet secrets. — The Hacker News
  2. Critical Elementor Pro Bug Exposes WordPress Sites to RCE AttacksA critical Elementor Pro flaw could let attackers upload PHP files and execute code remotely. — Bleeping Computer
  3. Zombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsA new attack can revive expired Visa cards for unauthorized contactless payments. — The Hacker News
  4. Def Con Attendees Targeted by Persistent Phishing CampaignAttendees from cybersecurity conferences are being targeted in ongoing phishing campaigns, raising concerns. — Infosecurity Magazine
  5. AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureHackers are using AI-generated scripts to exploit Siemens PLCs, posing risks to critical infrastructure. — The Hacker News