> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Une vulnérabilité a été découverte dans les produits MongoDB. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Le Moody Bible Institute de Chicago a été victime d'une fuite de données le 12 juin 2026, due à une faille de sécurité dans une application logicielle. Cette fuite a donné lieu à l'obtention illicite de certaines informations personnelles, notamment des noms. L'institut a pris des mesures pour sécur...
Universal Plant Services, LLC suffered a data breach where an unauthorized individual accessed data within their network from June 8, 2026, through June 12, 2026. The breach potentially includes first and last names, Social Security numbers, driver's license numbers, and financial account informatio...
Kyushu Electric Power Co., Inc. has disclosed a physical security incident that affects private data of more than 10 million customers. [...]
La pâtisserie Kee Wah (奇華餅家) a été victime d'une cyberattaque par ransomware ayant perturbé son système réseau interne le vendredi 12 juin 2026. Bien que l'entreprise n'ait pas encore pu confirmer si des données ont été exfiltrées, elle a pris des mesures préventives en contactant les personnes...
Plusieurs sanatoriums privés (Migone, Británico, Las Lomas et Santa Clara) et l'entreprise de médecine prépayée Asismed, tous liés au groupe Harrison, ont été victimes d'une cyberattaque de grande ampleur. Les cybercriminels ont utilisé un ransomware pour bloquer l'accès aux données, exigeant une ra...
Congress has all but assured the warrantless surveillance law will lapse. The fight for surveillance reform now has real leverage.
Un serveur d'une société de marché de gros au marché de Gangseo, à Séoul, a été infecté par une attaque par rançongiciel. L'incident a provoqué la paralysie temporaire du système d'enchères et des opérations de règlement. Bien que les opérations essentielles aient été rétablies, le service de consul...
In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims. [...]
Several security issues were fixed in the Linux kernel.
It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)
It was discovered that the Linux kernel did...
Several security issues were fixed in lwIP.
The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest.
Google's Mandiant attributes it to the group it tracks as UNC6240, and dates the activity betw...
The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.
Summary An international coalition of law enforcement agencies, including the U.S. DOJ, Secret Service, Europol, CBZC, and others, dismantled “AudiA6,”…
The post Global Law Enforcement Dismantles ‘AudiA6’ Crypto Laundering Network Linked to Ransomware Gangs appeared first on Chainalysis.
Corporations harvest and monetize ever-growing amounts of our personal data, such as our browsing history and physical location. One bitter fruit of this poisonous tree is known as “surveillance pricing”: corporations offer the same product to two different people at two different prices, based on s...
A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions of celebrities and at least one prominent US politician.
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]
Several security issues were fixed in .NET.
University of Nottingham is first of many, Shiny tells The Reg