[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Ex-school district employee jailed for hacks on former employer
A former  IT employee at an Iowa school district was sentenced to 21 months in prison after conducting a prolonged cyberattack against the former employer that disrupted classroom operations, deleted accounts, and caused tens of thousands of dollars in damages. [...]
> Amazon CEO reportedly raised Anthropic model concerns before government crackdown
Amazon CEO Andy Jassy may have been the source of security concerns that led Anthropic to cut off worldwide access to two models on Friday.
> Anthropic disables new models after government calls them a national security concern
The Commerce Department’s expert control decree led to the company shutting off access to Fable 5 and Mythos 5 worldwide, drawing sharp criticism from researchers and industry analysts. The post Anthropic disables new models after government calls them a national security concern appeared first on C...
> Debian Chromium Critical Execution Denial of Service Advisory DSA-6344-1
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 149.0.7827.114-1~deb12u1.
> Tietosuoja - autorité finlandaise
La plus haute juridiction administrative finlandaise a confirmé une amende de 792 639 € à l'encontre d'un commerçant en ligne pour ne pas avoir défini de durée de conservation pour les données des comptes clients, reportant cette responsabilité sur les clients eux-mêmes.Faits et contexteLa Cour admi...
> NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed. The post NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks appeared first on SecurityWeek.
> Washington Pulled the Plug on Anthropic ‘s Fable 5 and Mythos 5 models. The Rest of the World Is Watching.
Anthropic disputes restrictions on Mythos 5 and Fable 5, arguing the decision lacks transparency and isn’t based on clear technical evidence. On Friday June 12 at 5:21pm ET, Anthropic received a letter from the US Commerce Department, signed by Commerce Secretary Howard Lutnick and drafted with offi...
> Chinese hackers hijack auth flow, spy on isolated network for a decade
Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]
> Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. "In Splunk Enterpr...
> Anthropic coupe l’accès à Fable 5 et Mythos 5 sur ordre du gouvernement américain
Lancés le 9 juin 2026, désactivés 3 jours plus tard : Anthropic a dû suspendre l'accès à Fable 5 et Mythos 5 suite à une directive du gouvernement américain. Le post Anthropic coupe l’accès à Fable 5 et Mythos 5 sur ordre du gouvernement américain a été publié sur IT-Connect.
> The FBI built its own replica small town to simulate real-world cyberattacks
Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks.
> Des millions de dollars perdus via les distributeurs automatiques de cryptomonnaies.
Selon un nouveau rapport du FBI, les résidents américains ont perdu 388 millions de dollars à cause des bornes de cryptomonnaie en 2025. Le FBI a publié un supplément à son étude annuelle sur les incidents signalés au Centre de plaintes sur la cybercriminalité (IC3), axé sur les distributeurs automa...
> The FCC Wants to Kill Burner Phones
Plus: AI bug hunting fuels Microsoft’s biggest-ever Patch Tuesday, ShinyHunters ransomware gang exploits an Oracle zero-day, and more.
> In win for digital sovereignty, Netherlands blocks takeover of ID service by US firm
The Netherlands rejected the purchase of the ID infrastructure provider Solvinity, in a win for the digital sovereignty movement.
> US Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos
The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the cited jailbreak narrow and the capability widely available elsewhere. [...]
> U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Oracle PeopleSoft Enterprise PeopleTools flaw, tracked as CVE-2026-35...
> CVE-2026-40034 gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule
Information published.
> CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
Information published.
> Anthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals. The post Anthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls appeared first on SecurityWeek.
> CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
Information published.