> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
The new post-quantum executive order sets a 2030 migration deadline and establishes a powerful foundation for post-quantum resilience. We look at what it gets right, where it can go further, and our migration playbook for government and industry.
US President Donald Trump on Monday signed a pair of executive orders aimed at accelerating the federal government’s transition to post-quantum cryptography while expanding US investment in quantum technologies, establishing what the administration describes as a coordinated s...
It was discovered that the urllib3 Python HTTP library didn't sanitise some cross-origin redirects, which could result in information disclosure. For the stable distribution (trixie), this problem has been fixed in version 2.3.0-3+deb13u2.
A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally.
The campaign, active since February 2026, involves collecting credential li...
Plus more blasts from the past: NetWare, FTP, and HTTP
The Department of Justice announced the “seizure of a cloud computing account” used by subsidiaries of the Huione Group, a conglomerate severed from the U.S. financial system last year.
Cybercriminals are using a PowerShell script to hijack Telegram sessions and gain access to users’ accounts without a password or verification codes.
Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset.
The post Dragos Unveils AI for OT Security appeared first on SecurityWeek.
An executive order signed Monday aims to accelerate the government's transition to post-quantum cryptography (PQC), a new generation of encryption designed to protect data from the powerful quantum computers expected in the future.
Four flaws in Dify exposed cross-tenant data, documents and AI conversations. Two critical bugs enabled unauthenticated access and data theft. Zafran Labs researchers disclosed four vulnerabilities in Dify, the open-source AI platform used by major companies like Volvo and Maersk to run over a milli...
L'autorité italienne de protection des données (Garante per la protezione dei dati personali - GPDP) a aujourd'hui publié une décision de sanction à l'encontre de la société Action Fit, comprenant le prononcé d'une amende de 3 930 €, pour des manquements liés à l'envoi de communications commerciales...
What did the Proton team learn at Infosecurity Europe 2026? Find out our key observations and takeaways from the conference
L'Office du Commissaire à l'Information (ICO) a annoncé l'entrée en vigueur de nouvelles obligations légales pour toutes les organisations au Royaume-Uni concernant le traitement des réclamations en matière de protection des données.Depuis le 23 juin 2026, toutes les organisations sont tenues de fou...
Le Bureau du Commissaire à l'information (ICO) du Royaume-Uni a sanctionné la société KRA Consultancy Ltd d'une amende de 300 000 £ (environ 354 000 €) pour l'envoi de 5 575 715 messages textes de marketing direct illégaux entre avril 2022 et mai 2025.Ces messages, qui ont généré plus de 60 000 plai...
LIBNFS could be made to crash or run programs if it connected to a specially crafted NFS server.
L'autorité italienne de protection des données sanctionne un établissement de la Croix-Rouge pour avoir divulgué le statut VIH d'une patiente sur son plateau-repas, jugeant la mesure non nécessaire au regard de l'obligation d'appliquer des précautions universelles. Une amende distincte a été infligé...
Several security issues were fixed in LibVNCServer.
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as...
Multiple security vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the stable distribution (trixie), these problems h...
We spent 48 hours exploring the dark web and found stolen identities, malware, scams, and a thriving cybercrime economy.