> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving security updates until October 12, 2027. [...]
Le Bureau du délégué à la protection des données finlandais a émis un avertissement à l'encontre de l'Agence des services d'aide juridique et de tutelle pour avoir traité les données de crédit de ses employés sans base légale.L'agence avait contrôlé les données de crédit de 70 puis de 600 fonctionna...
Multiple security vulnerabilities were discovered in the SOGo groupware server, which could result in cross-site scripting or SQL injection. For the stable distribution (trixie), these problems have been fixed in version 5.12.1-3+deb13u2. We recommend that you upgrade your sogo packages.
L'autorité grecque a prononcé une réprimande à l'encontre d'un organisme de crédit pour manquement au principe d'exactitude, en raison de retards dans la correction de données financières erronées, et lui a ordonné de revoir ses procédures de vérification.Faits et contexteL'autorité hellénique de pr...
Multiple security vulnerabilities were discovered in libssh2, a client-side C library implementing the SSH2 protocol which could result in memory disclosure, denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a émis des recommandations de correction à l’encontre de trois entreprises majeures du secteur des services funéraires suite à une inspection préventive sur le traitement des données personnelles.L'inspection, initiée en j...
Le Conseil de l'Union européenne a abandonné la proposition de la Commission européenne visant à remplacer les bannières de cookies par un signal de consentement automatisé.La Commission avait initialement proposé d'introduire un nouvel article 88 ter au RGPD afin de substituer aux bannières de cook...
Most parcel mule scams start with fake job offers that trick victims into handling stolen goods.
Le Bureau du Commissaire à l'Information (ICO) a exhorté les dirigeants du secteur de l'aide sociale à s'engager publiquement en faveur d'une amélioration de la création, de la gestion et de l'accès aux dossiers de soins.Cet appel, lancé le 25 juin 2026, s'inscrit dans la campagne "Mieux Gérer les D...
Le Bundestag allemand a élu Moritz Hennemann comme nouveau Préposé fédéral à la protection des données et à la liberté d'information (BfDI).Il succède à Louisa Specht-Riemenschneider, qui se retire de ses fonctions pour des raisons de santé. Cette dernière continuera d'exercer ses fonctions jusqu'au...
In this week’s newsletter, Martin considers how AI will help threat intelligence by creating an easily queryable data source of intelligence reports.
Several security issues were fixed in AMD Microcode.
The Federal Communications Commission wants to require telecommunications providers to collect vast amounts of personal information from every person who wants a phone number in the name of combatting scam and spam calls. This plan will fail to combat the deluge of unwanted calls people in the Unite...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 149.0.7827.196-1~deb13u1.
Earlier this month, a German court ruled that Google is liable for its AI search summaries. Rejecting defenses like “users can check for themselves,” and that they generally know “that information generated with AI should not be blindly trusted,” the court held that the AI’s summaries are reflection...
Microsoft Edge runs in the background even when you don't use it. Here's how to stop and remove it on Windows 10 and 11.
Market research company Klue told customers that it believes the hacking group that stole their data is now deleting it. The company, however, warned about a second group of hackers wanting ransom.
A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable. [...]
Provisions setting up federal voter lists for each state and restricting mail ballots through USPS were declared unconstitutional.
The post Federal court rules Trump election-focused executive order illegal appeared first on CyberScoop.
Several security issues were fixed in xrdp.