> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
At least two vulnerabilities are already under attack
The AWS Customer Incident Response Team (AWS CIRT) encounters patterns that repeat across engagements when helping customers respond to security incidents. Weâre passionate about making sure that information is accessible so that everyone can improve their security posture and their organizationâs r...
GLPI alerte sur plusieurs failles dans ses plugins communautaires, dont une RCE critique (CVSS 8,9) dans GenericObject. Les correctifs sont disponibles.
Le post Plugins GLPI : 15 failles patchées, dont une RCE critique ! a été publié sur IT-Connect.
Police must get a warrant to request geofence data involving individual cellphones, the U.S. Supreme Court ruled in what represents a victory for privacy advocates.
Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users to real results.
Microsoft...
Several security issues were fixed in libheif.
The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on t...
The release of GPT-5.6 is being restricted by the US government: Find out what this means for European businesses
Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11
URI escape sequences. An attacker could possibly use this issue to cause
NSS to crash, resulting in a denial of service, or obtain sensitive
information.
WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not in their contact list. [...]
It was discovered that SQLite incorrectly handled certain memory operations
in the FTS5 full-text search extension. An attacker could use this issue to
cause SQLite to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Learn what a VPN passthrough is, how it works with older protocols, and why most modern networks no longer need to use it.
The ruling is a victory for election advocates who say the evidence overwhelmingly shows that voter fraud is rare and not tied to mail voting in general.Â
The post Supreme Court approves mail-in ballots that arrive after Election Day appeared first on CyberScoop.
You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States. Â
The case involved geofence warrant...
La Cour administrative suprĂȘme de Pologne confirme que l'obligation de tester rĂ©guliĂšrement les mesures de sĂ©curitĂ© s'applique depuis le premier jour d'application du RGPD, et que la notification d'une violation de donnĂ©es ne constitue pas une circonstance attĂ©nuante pour le calcul de l'amende.Faits...
L'Autorité de protection des données (APD) belge a publié son rapport annuel pour 2025, détaillant les changements internes, les dossiers marquants et les statistiques clés de l'année.L'année 2025 a vu le renouvellement du Comité de direction de l'APD, entré en fonction le 29 avril 2025, et l'élabor...
Dissenting justices who criticized the ruling said it would have âseismicâ implications for the Fourth Amendment.
The post Supreme Court delivers âmajor winâ for tech privacy in Chatrie ruling appeared first on CyberScoop.
L'autorité estonienne de protection des données (AKI) rappelle les différentes bases juridiques applicables au traitement des données personnelles des employés dans le cadre de la relation de travail.Certains traitements sont justifiés par la nécessité d'exécuter le contrat de travail, notamment pou...
L'autorité croate de protection des données (AZOP) a initié une procédure de contrÎle d'office à l'encontre de CARNET suite à une divulgation non autorisée de données personnelles d'élÚves et d'enseignants.Cette procédure fait suite à la publication non autorisée de données personnelles, notamment d...
Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. [...]