> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
The companies “must activate built-in features or implement technical solutions on smartphones and tablets to detect and block nude images for children,” according to a press release from the Home Office. Prime Minister Keir Starmer announced the measure in a speech at London Tech Week Monday.
Transmission could allow unintended actions if a user visited a malicious website.
Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container.
The flaw, CVE-2026-23111, sits in the kernel's nf_tables packet-filtering code and was patched upstream on February 5...
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.
It was discovered that Twig did not properly validate PHP callables when
using a source policy. An authenticated user could possibly use this issue
to execute arbitrary code.
Several security issues were fixed in systemd.
On a warm June evening in San Francisco, attorneys and other legally-minded friends of EFF gathered for our 18th Annual Cyberlaw Trivia Night, an annual test of tech-related legal knowledge, and the ability to remember some deeply obscure facts under pressure.Â
Returning Quizmaster Kurt Opsahl once...
CVE-2026-34908, CVE-2026-34909, et CVE-2026-34910 : exploitées ensemble, ces trois failles permettent d'exécuter du code en tant que root sur UniFi OS Server.
Le post Ces trois failles offrent un accès root sur UniFi OS Server : patchez ! a été publié sur IT-Connect.
WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. [...]
Here's what SMB founders and IT leaders should look for before connecting an AI assistant to their business data.
Meta claims it disrupted spear-phishing attempts linked to NSO Group and is asking a US federal court to hold the spyware vendor in contempt for allegedly violating an injunction that bars it from targeting WhatsApp and its users. “We successfully disrupted NSO-linked social engineering attempts aft...
Several security issues were fixed in Pillow.
poppler could be made to crash or run programs if it opened a specially crafted file.
The code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’t say why or whether it’s coming back.
Elliott Childre discovered that strongSwan incorrectly handled the cloning
of certain identities. A remote attacker could use this issue to cause
strongSwan to crash, resulting in a denial of service, or possibly execute
arbitrary code.
nginx could be made to consume excessive resources if it received specially crafted network traffic.
libjxl could be made to crash or run programs if it opened a specially crafted file.
L'autorité italienne sanctionne un hôpital pour des dossiers médicaux manuscrits illisibles, jugeant que l'obligation de compréhensibilité des données de santé inclut l'identification claire des professionnels de santé auteurs de chaque annotation.Faits et contexteL'autorité italienne de protection...
The company founded by Yossi Torati, Omer Gull, and Yuval Itzchakov has emerged from stealth mode.
The post A Security Raises $37 Million for Autonomous Offensive Security Platform appeared first on SecurityWeek.
L'Agence Espagnole de Protection des Données (AEPD) a sanctionné un transporteur pour ne pas avoir formalisé de contrat de sous-traitance avec une société exploitant des casiers de livraison, considérant que cette dernière agissait en qualité de sous-traitant et non de responsable de traitement conj...