> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Microsoft touted its latest action against malware infrastructure as a new approach aimed at the full cybercrime "supply chain." Europol said more than 300 servers were targeted.
Claude Code génère déjà au moins 4% des commits publics de GitHub (135 000/jour). Une vague de code IA qui pousserait Microsoft à louer de la capacité chez AWS.
Le post GitHub submergé par l’IA : Microsoft contraint de faire appel à AWS a été publié sur IT-Connect.
Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibility into the victim’s internal traffic.
The post Malicious hackers exploit Cisco zero-day for highest access level at communications service provider appeared first on...
Operation Endgame disrupted malware services like StealC and Amadey that enable ransomware, fraud, and attacks on critical infrastructure. Between June 15 and 19, 2026, Europol coordinated a two-week law enforcement operation involving agencies from Canada, Denmark, Germany, the Netherlands, the UK,...
Several security issues were fixed in Perl DBI module.
L'autorité autrichienne de protection des données (DSB) a communiqué le programme de ses contrôles prioritaires pour l'année 2026, qui se dérouleront en deux phases distinctes.La première phase, dont les procédures débuteront en mars 2026 à l'encontre de responsables de traitement et de sous-traitan...
L'autorité britannique de protection des données (ICO) a publié un rapport sur les pratiques de protection des données dans le secteur des technologies éducatives, suite à un programme d'audits.Ce rapport, intitulé "Technologies éducatives examinées", détaille les conclusions d'audits menés en 2024...
Millions of malicious apps slip past Google Play's defenses each year. Get the checklist to protect against Android malware.
La Commission Nationale de l'Informatique et des Libertés (CNIL) a mis en ligne un répertoire de ses informations publiques et s'est engagée dans une démarche d'ouverture de ses données.Ce répertoire recense les documents communicables contenant des informations publiques, tout en précisant que les...
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise les modalités de transmission des rapports d’expertise indépendante, désormais obligatoire pour les organismes de la fonction publique recourant au vote électronique pour leurs élections professionnelles.Depuis 2024, les organi...
Learn how CNAPP platforms are helping organizations prioritize exploitable risks, reduce exposure, and operationalize security across the application lifecycle.
The post CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms appeared first on Microsoft Security Blog.
La Commission européenne a publié un code de bonnes pratiques concernant le marquage et l'étiquetage des contenus générés par l'intelligence artificielle (IA).Ce code, de nature volontaire, vise à aider les fournisseurs et les déployeurs de systèmes d'IA générative à respecter les obligations de tra...
It was discovered that ImageMagick incorrectly handled certain images
when using the wavelet-denoise operator. An attacker could possibly use
this issue to trigger a heap buffer over-read, resulting in information
disclosure. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04...
200+ C2 servers linked to StealC and Amadey shut down
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
The post When Information Becomes the Attack Surface – Understanding AI Agent Traps appeared first on SecurityWeek.
Two members of the Scattered Spider cybercrime collective have admitted launching a cyberattack against Transport for London (TfL) that caused millions in damages.
Thalha Jubair, 20, from East London, and Owen Flowers, 18, from Walsall, West Midlands, were due to stand tria...
Researchers have found a critical FFmpeg flaw that could let attackers use a malicious video file to compromise vulnerable systems.
Several security issues were fixed in FFmpeg.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 26, 2026.
The vulnerability in questi...
Sold to the public as a foreign surveillance tool, Section 702 is the law has let intelligence agencies spy on millions of Americans’ private conversations without a warrant. Despite years of revelations about this law's misuse, Congress has repeatedly reauthorized Section 702 without meaningful ref...