La Commission Nationale de l'Informatique et des Libertés (CNIL) a détaillé les règles applicables aux dispositifs de contrôle d'accès aux locaux et de suivi des horaires de travail.L'employeur peut mettre en place des outils de contrôle individuel pour sécuriser l'accès aux bâtiments et aux zones r...
On March 30th, 2026, we publicly disclosed a Sensitive Information Exposure vulnerability in Gravity SMTP, a WordPress plugin with an estimated 100,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to retrieve detailed system configuration data and, criticall...
Why are you even reading this?! Rotate your passwords!!
Effective cloud document management can save your business hours every week. Learn how to build a system that keeps your team productive.
Sanctions compliance in crypto isn’t just about knowing who’s on a list today. It’s about understanding the full arc of…
The post Seeing the Full Picture: Why Pre- and Post-Designation Exposure Changes Everything in Sanctions Screening appeared first on Chainalysis.
See how Microsoft unifies identity and security signals to help teams prevent, detect, and respond to AI-accelerated attacks faster.
The post AI is accelerating cyberattacks—here’s how to stay ahead appeared first on Microsoft Security Blog.
Several security issues were fixed in Go Cryptography.
As Kyiv takes steps toward formal accession to the EU, the bloc is integrating Ukraine with its pool of pre-approved cybersecurity incident response companies.
A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials.
Ordinary stuff, until one move near the end.
Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim's machine, building a...
[This is a guest diary submitted by Varun Murdula]
DragonForce hid for months by routing malware traffic through Microsoft Teams infrastructure, masking C2 activity and evading network detection. DragonForce ransomware operators hit a major U.S. services firm and stayed hidden for one to two months by routing their command-and-control traffic throug...
Config-IniFiles could be made to run commands or overwrite files if it received specially crafted input.
Researchers have long warned that AI agents could lower the skill floor for offensive cyber operations, and a recent report by OALABS (Open Analysis) researchers bears that out. After recovering and analyzing over 1,000 agent sessions from a compromised server on which an attacker deployed Anthropic...
Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple sources, not a single campaign.
The post Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April appeared first on CyberScoop.
It was discovered that kitty incorrectly handled certain image data. An
attacker able to write to the terminal's input could possibly use this
issue to cause kitty to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-33633)
It was discovered that kitty incorrect...
Read the latest DFIR news – CCTV chain of custody, UEFI bootkit detection, Android intrusion log analysis, new LEAPP reporting, macOS Tahoe artifacts, and more.
What we believe We’ve been thinking deeply about enterprise security. The operating model that served us for the past decade (collect telemetry, store it, query it, build dashboards to watch it) is no longer keeping pace. We need to shift to the new world: telemetry, context, reasoning, and actions....
Researchers have uncovered an Android banking Trojan that targets more than 200 banking and cryptocurrency apps and can take over infected devices.
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Widget Factory Joomla Content Editor (JCE) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added Widget Factory Joomla Content Editor (JCE) flaw, tracked as CVE-202...
Europe is moving to tackle its massive structural reliance on foreign technology. Here’s what it means for European businesses.