à l'invitation de la Commission Nationale de l'Informatique et des Libertés (CNIL), les autorités de protection des données des pays du G7 ont adopté des principes communs sur les technologies émergentes et la protection des mineurs.Réunies à Paris les 25 et 26 juin 2026, les autorités ont échangé s...
Sanction d'un acteur du secteur des crypto-actifs pour des transferts internationaux de données personnelles réalisés sans le consentement spécifique et éclairé des utilisateurs, notamment en désignant un destinataire erroné.Faits et contexteL'autorité sud-coréenne de protection des données (PIPC) a...
We know that ICE wants to deploy eyeglasses with facial recognition that can identify people in real time.
Turns out Meta is prototyping the feature with a Pentagon supplier. (Alternate news story.)
Exposed records from the private group included the personal information of a senior White House intelligence official and an active-duty special operations officer.
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach.
Malware containing code that commands LLM-assisted products to abort their analysis or refuse to implement it is already circulating, according to a post from...
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in Southeast Asia.
The activity, particularly aimed at state-owned enterprises in the energy and govern...
This Pride month, weâre calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without usersâ opt-in consent.
Grindr is a dating app for the L...
Poke your head into just about any online social networkâor any general conversations about internet cultureâand youâll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, âthe algorithmâ has been shorthand for the ways the tech g...
Researchers warn many AI coding assistants now execute commands from project configurations
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact.Â
The post Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories appeared first on SecurityWeek.
This is not science fiction. Itâs not premature. If towns, cities, states, or the federal government want to act to reign in the emergence of armed police drones and robots, we have precious little time. In the absence of substantial regulation around when and how domestic law enforcement in the Uni...
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security restrictions or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 6.0.4-2+deb13u8.
Ignoring EFFâs warnings about the dangers and impossibility of implementing a new mandate for 3D print surveillance software, the California State Assembly has signed off on legislation to do just that. In the process, legislators amended the bill to make it even more confusing, while failing to add...
Microsoft met fin Ă NT LAN Manager (NTLM), mais le remplacer dans les systĂšmes legacy, les applications et les intĂ©grations tierces nâest pas une opĂ©ration simple. Pour les accĂšs distants exposĂ©s sur internet en particulier, lâauthentification par certificat (CBA) est souvent le remplaçant le plus s...
Roughly two dozen companies have notified their customers of the Klue-Salesforce incident impact.
The post More Klue Breach Victims Identified as Hackers Get Hacked appeared first on SecurityWeek.
Australiaâs Security Intelligence Organization (ASIO) has uncovered an attack on a critical infrastructure operatorâs network. State-sponsored actors had compromised the network and were preparing to sabotage it, according to its director general, Mike Burgess.
Other countr...
Summary JaredfromSubway.eth, the most prolific sandwich-attack bot on Ethereum, was drained of at least $7.5 million in a reverse honeypotâŠ
The post Inside a Sandwich Attack: Lessons From the $7.5 Million Heist Against JaredfromSubway.eth appeared first on Chainalysis.
Other noteworthy stories that might have slipped under the radar: Russia used Cellebrite to hack activistâs phone, Five Eyes issue urgent AI threat warning, macOS Gaslight backdoor, Scattered Spider guilty pleas.
The post In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs a...
AI won't replace GRC analysts, but it can eliminate much of the repetitive work they do. Anecdotes walks through building an agent that continuously monitors controls, identifies evidence gaps, and opens remediation tasks. [...]
A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems.
CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds write in the packet-editing action (act_pedit) that corrupts shared page-cache memory. A public, working exploit appeare...