[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Cisco SD-WAN make-me-root bug under attack
Second Catalyst SD-WAN Manager flaw exploited as an 0-day this month
> Feds freaked over Fable 5 after simple 'fix this code' prompt, not jailbreak, says researcher
According to the one person who actually read the research paper
> UK’s social media ban for children: the privacy problems Australia already exposed
The UK is banning under-16s from social media, following Australia's lead. But the real cost may be privacy.
> Debian Trixie DSA-6347-1 bird2 Important Denial of Service Advisory
Multiple security vulnerabilities were discovered in the BIRD internet routing daemon, which could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 2.17.5-0+deb13u1. We recommend that you upgrade your bird2 packages.
> Debian Trixie LibreOffice Critical DoS Arbitrary Code Execution DSA-6346-1
Multiple security vulnerabilities were discovered in LibreOffice, which could result in denial of service or potentially the execution of arbitrary code if malformed files are opened. For the stable distribution (trixie), these problems have been fixed in version 4:25.2.3-2+deb13u5.
> Inside a malicious infrastructure delivering EtherRAT, phishing pages, and malicious software 
We found EtherRAT malware being distributed by a website with a strange homepage. Following the trail, we discovered a vast network of malicious infrastructures, distributing malware, malicious documents, remote desktop software, and phishing pages. 
> Debian libgd-perl Important Arbitrary Command Execution CVE-2026-11526
A flaw was discovered in libgd-perl, a Perl module wrapper for libgd, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted file names. For the stable distribution (trixie), this problem has been fixed in version 2.78-1+deb13u1.
> Google exposes China espionage group that’s been lurking in networks undetected since 2023
The revelation mirrors an alarming pattern of Chinese espionage groups dropping backdoors into critical infrastructure to intercept research and steal data with national security implications. The post Google exposes China espionage group that’s been lurking in networks undetected since 2023 appeare...
> SimpleHelp bug lets hackers create rogue remote support accounts
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol. [...]
> Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole login credentials. The exfiltration was the u...
> North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi). According to a report published by Proofpoint, the threat actor has b...
> June 2026 Stealer Logs - 56,278,397 breached accounts
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searc...
> Le VPN intégré de Firefox devient illimité cet été : profitez-en dès maintenant
Jusqu'au 31 août 2026, le VPN intégré et gratuit de Firefox passe en données illimitées et propose 28 localisations de serveurs. Voici comment en profiter. Le post Le VPN intégré de Firefox devient illimité cet été : profitez-en dès maintenant a été publié sur IT-Connect.
> Building an autonomous SOC: core challenges and solutions
How AI is being introduced in security operations centers, and whether AI agents can successfully function without a human SOC analyst.
> Australian Sugar Producer Mackay Sugar Reports Cyber Incident
Mackay Sugar, Australia’s second-largest sugar producer, disclosed a cyberattack on June 10, potentially affecting key processing operations. Mackay Sugar is one of Australia’s largest sugar producers and the country’s second-largest sugar manufacturer. The company is based in the Mackay region of t...
> Chinese hackers breached North American research institutions via REDCap servers
A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerabl...
> Maine closes data breach portal to the public after fake reports
Maine is still allowing companies to report breaches, but won’t make the portal easily available to the public until after it completes an audit of its procedures to stop such incidents, according to a press release from the Maine attorney general’s office.
> BfDI - autorité allemande
Le Préposé fédéral à la protection des données et à la liberté d'information (BfDI) organise un atelier de réflexion sur le Règlement sur les données (DA).Le troisième atelier de réflexion se tiendra le 7 juillet 2026 à Berlin, à destination des représentants experts du monde économique et de la soc...
> PIPC - autorité sud-coréenne
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a initié une série d'inspections sur site pour évaluer la gestion des données dans le secteur public.Le 12 juin, l'autorité a mené une première inspection auprès de l'Institut Coréen de Recherche et de Développement de l'I...
> Council of Europe hacked in ShinyHunters' PeopleSoft heist
Joins the ranks of Nottingham Uni and 100 other unnamed victims