> TODAY'S SUMMARY (51 articles)
Today's cybersecurity news highlights several significant threats and trends. The FBI has issued warnings about ongoing FortiBleed attacks, where attackers can lock organizations out of their own Fortinet firewalls, indicating a serious vulnerability for admins. In AI developments, Anthropic's new model is reportedly better at identifying vulnerabilities, while a Chinese hacker successfully utilized AI tools to breach South Korean banks. Additionally, there has been a rise in sophisticated phishing kits that include advanced session management features, targeting banking and government sectors across multiple regions. A critical vulnerability in Atlassian products is currently being exploited, and a recent ransomware recovery scheme has revealed fraudulent practices, underscoring the ongoing challenges in cybersecurity integrity.
|
// AI-powered summary generated at 12:00
The TeamPCP threat group has pulled off another big supply chain attack which within a few hours this week was able to successfully compromise 170 Node Package Manager (npm) and PyPI packages.
The attack affected the entire TanStack Router ecosystem (@tanstack) of 42 packag...
Škoda Auto, a wholly owned subsidiary of the Volkswagen Group, has disclosed a data breach after attackers hacked its online shop and stole the personal information of an undisclosed number of customers. [...]
Intrusion Logging is a new part of Android’s Advanced Protection Mode, which aims to help protect human rights activists, journalists, and dissidents from government spyware attack and law enforcement forensic devices.
Intrusion Logging marks the first feature from a major device vendor to aid with forensic detection of sophisticated threats, Amnesty International said.
The post Google and Amnesty International teamed up to make it harder for spyware vendors to hide appeared first on CyberScoop.
Android 17, expected to roll out next month, will introduce several security and privacy features focused on device theft, threat detection, and banking scam calls. [...]
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre de la société Isabel SA, comprenant le prononcé d'une amende de 120 000 €, pour des manquements liés à son service d'identification et d'authentification TruliUs, notamment son auto-qualification erronée en tan...
La Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) du Maroc a présenté les conclusions de ses travaux sur la protection des informations génomiques.Entre 2023 et 2025, la CNDP a collaboré avec un groupe d'experts comprenant des généticiens et des représenta...
The report, released by the advocacy group Human Rights Watch on Tuesday, alleges that the European Commission has failed to effectively police member states' surveillance tech sales despite the 2021 implementation of updated bloc-wide export rules designed to rein in the practice.
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 12 mai 2026.
Partie I (avec débats): :
* Bilan de l’activité des plaintes et de l’exercice des droits indirect sur l’année 2025.
Partie II (sans débats): :
* Exame...
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre d'une société, comprenant le prononcé d'une amende de 176 946,61 €, pour des manquements liés à la gestion de la boîte de messagerie professionnelle d'une ancienne consultante après son départ. Cette affaire dé...
This week, Apple released iOS 26.5, an update that supports end-to-end encryption for Rich Communication Services (RCS), meaning conversations between Android and iPhone will soon be encrypted in the default chat apps. This has been a long time coming, and is a welcome delivery on a promise both Goo...
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre de la Société Wallonne des Eaux (SWDE), comprenant le prononcé d'une amende totale de 86 000 €, pour des manquements liés à l'enregistrement d'appels téléphoniques à des fins de contrôle qualité et de formation...
While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution.
The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek.
Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution.
Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email.
The vulnerabi...
Osama Khalid was just twelve years old when he began contributing to Wikipedia Arabic. In the height of the blogging era, he became a prolific blogger, publishing writings on his home country of Saudi Arabia, meetups he attended, and his opinions and observations about open source technology and fre...
The bank said the security lapse was due to the use of an “unauthorized” AI software app.
SAP introduced the Autonomous Enterprise to help enhance the world’s most critical business workflows, so that humans and AI work together to meet the accelerating demands of global business profitably, strategically and safely. “For the mission-critical processes of our customers, ‘almost right’ ju...
Read how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architecture, and graceful service degradation.
The post Defending consumer web properties against modern DDoS attacks appeared first on Microsoft Security Blog.
Exaforce announced a $125 million Series B financing round, one of the largest ever in the emerging AI SOC space. The round includes participation from HarbourVest, Peak XV, Mayfield, Khosla Ventures, Seligman Ventures and AICONIC. The new capital will help Exaforce scale its AI-native security oper...
Researchers found a ClickFix campaign that uses fake Claude setup guides to trick Mac users into infecting themselves.