> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
La Commission Nationale de l'Informatique et des Libertés (CNIL) a annoncé la nomination de son nouveau directeur administratif et financier.À compter du 15 juin 2026, un administrateur de l'État est nommé directeur administratif et financier de la CNIL, succédant à son prédécesseur qui occupait cet...
L'Autorité suédoise de protection de la vie privée (IMY) a aujourd'hui publié une décision prononçant une réprimande à l'encontre de Securitas Sverige AB pour des manquements en lien avec la vidéosurveillance de ses salariés conducteurs de véhicules.Faits et contexteL'affaire trouve son origine dans...
Several security issues were fixed in rabbitmq-c.
Le non-respect du droit d'opposition à la prospection commerciale directe entraîne une violation de l'obligation de licéité du traitement.Faits et contexteL'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'enc...
L'autorité sud-coréenne de protection des données (PIPC) a aujourd'hui publié une décision de sanction à l'encontre de Coupang et de sa filiale Coupang Fulfillment Services, comprenant le prononcé d'amendes d'un montant total de plus de 416 millions d'euros, pour des manquements graves et multiples...
Apprenez à installer et à configurer le serveur MCP thunderbird-mcp pour connecter une IA à Thunderbird et bénéficier d'un assistant pour gérer vos e-mails.
Le post Connecter l’IA à Thunderbird avec ce serveur MCP pour gérer vos e-mails a été publié sur IT-Connect.
Several security issues were fixed in Squid.
The CA certificates in the ca-certificates package were updated.
AI bills of materials (AIBOMs), modeled on standards that worked for software, could transform how policymakers understand and regulate AI. A new roadmap outlines what they need to include and how to get there.
The post A case for how to shape ‘ingredient lists’ for AI models appeared first on Cybe...
Authorities said scammers previously exploited the feature by posting fake exam questions before the test and later replacing them with the real questions, making it look like they had leaked the exam in advance.
Attackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products depend on for threat verdicts to enforce blocking decisions and trigger automated responses. The warning came on Monday from...
The digital health company said it learned of the breach on June 8 and the attackers demanded a ransom.
The post iRhythm Confirms Data Stolen in Hack appeared first on SecurityWeek.
It was discovered that rabbitmq-c exposed credentials in command-line
arguments under certain circumstances. A local attacker could possibly use
this issue to obtain sensitive information. This issue only affected Ubuntu
22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-35789)
It was discovered that rabbit...
Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration
Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security experts warn the age checks are easy to circumvent and create new data-breach risks. [...]
China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands
From building LED bulbs to graduating college and buying a house with money earned from bug bounties.
The post Hacker Conversations: Isira Adithya, the Evolution of an Ethical Hacker appeared first on SecurityWeek.
The DragonForce ransomware group used a custom malware called Backdoor.Turn to hide command-and-control traffic inside Microsoft Teams relay infrastructure during an intrusion at a U.S. services company, according to Symantec. DragonForce is a ransomware-as-a-service operation that has been active s...
Three FortiSandbox flaws, including one patched last week, are being actively exploited, highlighting the shrinking window for defenders. Cybersecurity firm Defused Cyber confirmed it’s seen active exploitation of three vulnerabilities in Fortinet FortiSandbox within a 24-hour window. Two of them ha...
GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected. [...]