> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant threats, including a major breach at French Bank Crédit Mutuel Arkéa, where attackers exploited vulnerabilities in a third-party service provider to steal up to $133 million. This incident underscores the ongoing risk associated with third-party integrations. Additionally, refrigeration cyberattacks continue to target European retailers, raising concerns about supply chain security. As organizations face these evolving threats, proactive measures and timely patching, especially in light of upcoming Patch Tuesday, are crucial for mitigating risks. Overall, the focus remains on enhancing security protocols to safeguard against sophisticated cyber threats.
|
// AI-powered summary generated at 12:00
Several security issues were fixed in systemd.
On a warm June evening in San Francisco, attorneys and other legally-minded friends of EFF gathered for our 18th Annual Cyberlaw Trivia Night, an annual test of tech-related legal knowledge, and the ability to remember some deeply obscure facts under pressure.Â
Returning Quizmaster Kurt Opsahl once...
CVE-2026-34908, CVE-2026-34909, et CVE-2026-34910 : exploitées ensemble, ces trois failles permettent d'exécuter du code en tant que root sur UniFi OS Server.
Le post Ces trois failles offrent un accès root sur UniFi OS Server : patchez ! a été publié sur IT-Connect.
WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. [...]
Here's what SMB founders and IT leaders should look for before connecting an AI assistant to their business data.
Meta claims it disrupted spear-phishing attempts linked to NSO Group and is asking a US federal court to hold the spyware vendor in contempt for allegedly violating an injunction that bars it from targeting WhatsApp and its users. “We successfully disrupted NSO-linked social engineering attempts aft...
Several security issues were fixed in Pillow.
poppler could be made to crash or run programs if it opened a specially crafted file.
The code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’t say why or whether it’s coming back.
Elliott Childre discovered that strongSwan incorrectly handled the cloning
of certain identities. A remote attacker could use this issue to cause
strongSwan to crash, resulting in a denial of service, or possibly execute
arbitrary code.
libjxl could be made to crash or run programs if it opened a specially crafted file.
nginx could be made to consume excessive resources if it received specially crafted network traffic.
L'autorité italienne sanctionne un hôpital pour des dossiers médicaux manuscrits illisibles, jugeant que l'obligation de compréhensibilité des données de santé inclut l'identification claire des professionnels de santé auteurs de chaque annotation.Faits et contexteL'autorité italienne de protection...
The company founded by Yossi Torati, Omer Gull, and Yuval Itzchakov has emerged from stealth mode.
The post A Security Raises $37 Million for Autonomous Offensive Security Platform appeared first on SecurityWeek.
L'Agence Espagnole de Protection des Données (AEPD) a sanctionné un transporteur pour ne pas avoir formalisé de contrat de sous-traitance avec une société exploitant des casiers de livraison, considérant que cette dernière agissait en qualité de sous-traitant et non de responsable de traitement conj...
Un sous-traitant qui, pour répondre à un exercice du droit d'opposition, crée et gère une liste d'exclusion applicable à l'ensemble de ses clients (responsables du traitement) agit en qualité de responsable du traitement pour cette finalité propre et doit disposer d'une base juridique distincte et v...
The company said it spotted a spearphishing campaign linked to the Israeli spyware maker targeting WhatsApp users, despite a court order prohibiting it.
The post Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint appeared first on CyberScoop.
Pashinyan's Civil Contract party won nearly 50% of Sunday's vote, defeating the pro-Russian Strong Armenia party led by Russian-Armenian billionaire Samvel Karapetyan, which received around 23% of the vote.
Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7
Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group.
In addition, the tech giant said it's filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users....