The AWS Customer Incident Response Team (AWS CIRT) encounters patterns that repeat across engagements when helping customers respond to security incidents. We’re passionate about making sure that information is accessible so that everyone can improve their security posture and their organization’s r...
GLPI alerte sur plusieurs failles dans ses plugins communautaires, dont une RCE critique (CVSS 8,9) dans GenericObject. Les correctifs sont disponibles.
Le post Plugins GLPI : 15 failles patchées, dont une RCE critique ! a été publié sur IT-Connect.
Police must get a warrant to request geofence data involving individual cellphones, the U.S. Supreme Court ruled in what represents a victory for privacy advocates.
Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users to real results.
Microsoft...
Several security issues were fixed in libheif.
The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on t...
The release of GPT-5.6 is being restricted by the US government: Find out what this means for European businesses
Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11
URI escape sequences. An attacker could possibly use this issue to cause
NSS to crash, resulting in a denial of service, or obtain sensitive
information.
WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not in their contact list. [...]
It was discovered that SQLite incorrectly handled certain memory operations
in the FTS5 full-text search extension. An attacker could use this issue to
cause SQLite to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Learn what a VPN passthrough is, how it works with older protocols, and why most modern networks no longer need to use it.
The ruling is a victory for election advocates who say the evidence overwhelmingly shows that voter fraud is rare and not tied to mail voting in general.
The post Supreme Court approves mail-in ballots that arrive after Election Day appeared first on CyberScoop.
You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.
The case involved geofence warrant...
La Cour administrative suprême de Pologne confirme que l'obligation de tester régulièrement les mesures de sécurité s'applique depuis le premier jour d'application du RGPD, et que la notification d'une violation de données ne constitue pas une circonstance atténuante pour le calcul de l'amende.Faits...
L'Autorité de protection des données (APD) belge a publié son rapport annuel pour 2025, détaillant les changements internes, les dossiers marquants et les statistiques clés de l'année.L'année 2025 a vu le renouvellement du Comité de direction de l'APD, entré en fonction le 29 avril 2025, et l'élabor...
Dissenting justices who criticized the ruling said it would have “seismic” implications for the Fourth Amendment.
The post Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling appeared first on CyberScoop.
L'autorité estonienne de protection des données (AKI) rappelle les différentes bases juridiques applicables au traitement des données personnelles des employés dans le cadre de la relation de travail.Certains traitements sont justifiés par la nécessité d'exécuter le contrat de travail, notamment pou...
L'autorité croate de protection des données (AZOP) a initié une procédure de contrôle d'office à l'encontre de CARNET suite à une divulgation non autorisée de données personnelles d'élèves et d'enseignants.Cette procédure fait suite à la publication non autorisée de données personnelles, notamment d...
Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. [...]
L'autorité espagnole sanctionne une entreprise d'une amende de 76 800 € pour ne pas avoir répondu à ses demandes d'information, entravant ainsi ses pouvoirs d'enquête.Faits et contexteL'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de AE...