This week marks four years since Dobbs v. Jackson Women’s Health Organization overturned Roe v. Wade’s constitutional protections for people seeking abortion care. Anniversaries are a moment to take stock, and over the last four years, EFF has seen firsthand how digital rights and reproductive right...
Tata Electronics confirmed a data breach after hackers claimed to steal 630GB of data, including alleged Apple supplier and Tesla documents. Tata Electronics, a major supplier to Apple and Tesla, has confirmed a cybersecurity breach weeks after stolen data was advertised on a hacker forum. Tata Elec...
Former employee accuses company of prioritizing pending IPO over client security
The prediction market giant Polymarket said it's refunding users who had funds stolen due to a third party breach.
The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for undersea cables providers
The post FCC passes new cybersecurity rules for emergency systems, undersea cables appeared first on CyberScoop.
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]
Multiple vulnerabiliites have been discovered in PDNS Recursor, a resolving name server which could result in denial of service, cache poisoning or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 5.2.11-0+deb13u1.
Multiple security vulnerabilities were discovered in the dnsdist DNS loadbalancer, which could result in denial of service, information disclosure or bypass of security rules. For the stable distribution (trixie), these problems have been fixed in version 1.9.15-0+deb13u1.
Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl. Curl maintainers addressed eighteen vulnerabilities with a single update, and one of them goes back 25 years. That’s not a typo, it really sat there since the...
It was discovered that incorrect request handling in the internal web server of the PowerDNS DNS server could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 4.9.16-0+deb13u1. We recommend that you upgrade your pdns packages.
Once a new CISA director is in place, the agency will ramp up hiring efforts, Homeland Security Markwayne Mullin told lawmakers. The White House has not yet announced a nominee.
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving security updates until October 12, 2027. [...]
Multiple security vulnerabilities were discovered in the SOGo groupware server, which could result in cross-site scripting or SQL injection. For the stable distribution (trixie), these problems have been fixed in version 5.12.1-3+deb13u2. We recommend that you upgrade your sogo packages.
Le Bureau du délégué à la protection des données finlandais a émis un avertissement à l'encontre de l'Agence des services d'aide juridique et de tutelle pour avoir traité les données de crédit de ses employés sans base légale.L'agence avait contrôlé les données de crédit de 70 puis de 600 fonctionna...
Multiple security vulnerabilities were discovered in libssh2, a client-side C library implementing the SSH2 protocol which could result in memory disclosure, denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in
L'autorité grecque a prononcé une réprimande à l'encontre d'un organisme de crédit pour manquement au principe d'exactitude, en raison de retards dans la correction de données financières erronées, et lui a ordonné de revoir ses procédures de vérification.Faits et contexteL'autorité hellénique de pr...
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a émis des recommandations de correction à l’encontre de trois entreprises majeures du secteur des services funéraires suite à une inspection préventive sur le traitement des données personnelles.L'inspection, initiée en j...
Most parcel mule scams start with fake job offers that trick victims into handling stolen goods.
Le Conseil de l'Union européenne a abandonné la proposition de la Commission européenne visant à remplacer les bannières de cookies par un signal de consentement automatisé.La Commission avait initialement proposé d'introduire un nouvel article 88 ter au RGPD afin de substituer aux bannières de cook...
Le Bureau du Commissaire à l'Information (ICO) a exhorté les dirigeants du secteur de l'aide sociale à s'engager publiquement en faveur d'une amélioration de la création, de la gestion et de l'accès aux dossiers de soins.Cet appel, lancé le 25 juin 2026, s'inscrit dans la campagne "Mieux Gérer les D...