> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
CFake : un Français poursuivi après la diffusion massive de deepfakes sexuels visant 14 000 victimes.
Les actualités cyber de la semaine : sécurité informatique, identité numérique, piratage et actions de la justice.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: DockSec: Open-source AI-powered Docker security scanner DockSec is an OWASP Incubator Project that combines three container security scanners with a language-model layer for explanation and remediation....
Ukrainian national Oleksii Lytvynenko pleaded guilty in the U.S. for his role in Conti ransomware attacks targeting victims worldwide. Oleksii Oleksiyovych Lytvynenko (44), a Ukrainian national extradited from Ireland to the U.S., has pleaded guilty to conspiracy to commit wire fraud for his involve...
Une cyberattaque a affecté MIP Holdings, un fournisseur de services tiers pour plusieurs assureurs sud-africains, compromettant des informations personnelles de clients. L'attaque, attribuée au groupe de rançongiciels « The Gentlemen », a eu lieu en juin. Bien que l'assureur Hollard ait rejeté toute...
Sapporo Holdings Corporation a annoncé qu'elle avait détecté des accès non autorisés à deux de ses filiales étrangères, POKKA PTE. LTD. et SLEEMAN BREWERIES LTD. Ces accès ont été détectés suite à des journaux de communication suspects. Les deux filiales ont isolé les systèmes concernés et mènent un...
Une fuite revendiquée vise 7 729 comptes notariaux et pourrait faciliter hameçonnage ciblé et usurpation.
Après Tchap, un pirate revendique des intrusions visant Nantes, Lyon, Bobigny, Paris et Smartbox.
A former  IT employee at an Iowa school district was sentenced to 21 months in prison after conducting a prolonged cyberattack against the former employer that disrupted classroom operations, deleted accounts, and caused tens of thousands of dollars in damages. [...]
Amazon CEO Andy Jassy may have been the source of security concerns that led Anthropic to cut off worldwide access to two models on Friday.
The Commerce Department’s expert control decree led to the company shutting off access to Fable 5 and Mythos 5 worldwide, drawing sharp criticism from researchers and industry analysts.
The post Anthropic disables new models after government calls them a national security concern appeared first on C...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 149.0.7827.114-1~deb12u1.
La plus haute juridiction administrative finlandaise a confirmé une amende de 792 639 € à l'encontre d'un commerçant en ligne pour ne pas avoir défini de durée de conservation pour les données des comptes clients, reportant cette responsabilité sur les clients eux-mêmes.Faits et contexteLa Cour admi...
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
The post NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks appeared first on SecurityWeek.
Anthropic disputes restrictions on Mythos 5 and Fable 5, arguing the decision lacks transparency and isn’t based on clear technical evidence. On Friday June 12 at 5:21pm ET, Anthropic received a letter from the US Commerce Department, signed by Commerce Secretary Howard Lutnick and drafted with offi...
Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution.
The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system.
"In Splunk Enterpr...
Lancés le 9 juin 2026, désactivés 3 jours plus tard : Anthropic a dû suspendre l'accès à Fable 5 et Mythos 5 suite à une directive du gouvernement américain.
Le post Anthropic coupe l’accès à Fable 5 et Mythos 5 sur ordre du gouvernement américain a été publié sur IT-Connect.
Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks.
Selon un nouveau rapport du FBI, les résidents américains ont perdu 388 millions de dollars à cause des bornes de cryptomonnaie en 2025. Le FBI a publié un supplément à son étude annuelle sur les incidents signalés au Centre de plaintes sur la cybercriminalité (IC3), axé sur les distributeurs automa...