> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Microsoft has been named a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026.
The post ​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report appeared first on Microsoft Security Blog.
An alleged Russian-speaking group of cybercriminals is reportedly compromising and targeting several major companies that use Fortinet Firewalls and VPNs through previously known passwords.
Cybercriminals are targeting World Cup 2026 fans with fake tickets, mobile phishing, and fraudulent streaming apps. Here's how to protect yourself.
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research.
The threat actor also has at their disposal a dedicated WordPress phishing page that acts as the central hub,...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. For the stable distribution (trixie), these prob...
Dolibarr could be made to run programs if it received specially crafted network traffic.
NCSC CEO Richard Horne warned that “kinetic targeting in any conflict tomorrow will be based on intelligence gathered today” and that nation-state adversaries were “prepositioning” throughout British critical infrastructure.
Several security issues were fixed in kitty.
L'autorité italienne de protection des données (GPDP) a sanctionné un hôpital pour de multiples manquements liés à la gestion de son dossier patient informatisé, notamment en matière d'information, de consentement, de droits d'accès et de traçabilité des consultations.Faits et contexteL'autorité ita...
Le Bureau du Commissaire à l'information (ICO) a conclu son enquête pénale concernant l'obtention et la divulgation illicites d'informations médicales suite à une violation signalée par la London Clinic.L'enquête, initiée après un signalement en mars 2024, portait sur la transmission d'informations...
Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed RoguePlanet.
The vulnerability has now been assigned the CVE identifier CVE-2026-50656 (CVSS score: 7.8), with the tech giant describing it as a privilege escalation flaw.
"Microsoft is a...
L'autorité italienne de protection des données (Garante) sanctionne l'Agence pour l'Italie numérique (AgID) d'une amende de 55 000 € pour ne pas avoir informé les professionnels du transfert automatique et de la publication de leur domicile numérique professionnel dans un nouvel annuaire public, acc...
L'autorité italienne de protection des données a sanctionné la compagnie aérienne Emirates pour des manquements liés à la transparence et à la durée de conservation des données de santé collectées via son formulaire médical, tout en reconnaissant la légitimité de cette collecte au nom de la sécurité...
It was discovered that atril, the MATE document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-4+deb13u1.
L'autorité italienne de protection des données a sanctionné une entreprise de santé publique pour un suivi par géolocalisation jugé excessif de ses véhicules de service, et pour l'utilisation illicite des données collectées dans le cadre d'une procédure disciplinaire.Faits et contexteL'autorité ital...
L'autorité espagnole de protection des données (AEPD) a sanctionné Vodafone España à hauteur de 1 050 000 € pour des manquements graves aux principes de licéité et de sécurité, ayant permis l'ouverture d'une ligne et la communication d'une facture à un tiers non autorisé.Faits et contexteL'autorité...
On March 30th, 2026, we publicly disclosed a Sensitive Information Exposure vulnerability in Gravity SMTP, a WordPress plugin with an estimated 100,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to retrieve detailed system configuration data and, criticall...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a détaillé les règles applicables aux dispositifs de contrôle d'accès aux locaux et de suivi des horaires de travail.L'employeur peut mettre en place des outils de contrôle individuel pour sécuriser l'accès aux bâtiments et aux zones r...
Why are you even reading this?! Rotate your passwords!!
Effective cloud document management can save your business hours every week. Learn how to build a system that keeps your team productive.