> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
La société Gendai Butsudan a annoncé qu'une fuite potentielle de données personnelles, suite à un accès non autorisé, avait été découverte le 8 juin. L'entreprise a pris des mesures pour bloquer l'accès externe au réseau concerné et mène une enquête approfondie avec des experts externes. Elle a conf...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Le Conseil municipal d'Alexandrie a confirmé avoir détecté un incident de sécurité informatique lié à une attaque par ransomware le 8 juin 2026. Le Conseil a immédiatement activé son plan de réponse, informé les autorités compétentes (y compris l'Autorité de protection des données) et lancé une enqu...
La ville d'Acworth a été victime d'une cyberattaque contre certains de ses systèmes informatiques le 8 juin 2026. Les services municipaux continuent de fonctionner normalement et aucune opération quotidienne n'a été affectée selon les autorités. Les forces de l'ordre ont été informées et mènent une...
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result privilege escalation, information disclosure, SQL injections, LDAP authentication bypass, cross-site scripting or spreadsheet (CSV/formula) injection. For the oldstable...
Le collège Reynella East a été victime d'une cyberattaque majeure qui a paralysé l'intégralité de son système informatique. Cet incident a potentiellement mis en danger les informations personnelles des étudiants.
Le district scolaire de New York (New York City Public Schools) enquête sur deux incidents de cybersécurité distincts. Le premier concerne un logiciel malveillant détecté sur des ordinateurs d'un laboratoire partagé dans un campus de Manhattan, qui a été immédiatement supprimé. Le second concerne un...
Microsoft has created an open-source fork of Windows Terminal called "Intelligent Terminal," and it allows you to use AI directly inside Terminal without interfering with the regular session. [...]
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1.22.1-9+deb12u8.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 149.0.7827.53-1~deb12u1.
New samba packages are available for Slackware 15.0 to fix security issues.
ShinyHunters leaked 234 GB of data allegedly stolen from DentaQuest after failed negotiations, potentially impacting 2.6 million people. The ShinyHunters extortion group has published a 234 GB archive of data allegedly stolen from dental benefits administrator DentaQuest. The cybercrime gang added t...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Malware Targeting WordPress Abuses Steam Community Profiles for Command & Control Operations  Legitimate-Looking Codex Remote UI Secretly Stea...
A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures. [...]
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. U.S. CISA adds SolarWinds Serv-U flaw to its Know...
The Silent Ransom Group extortion gang is actively targeting U.S. law firms and professional services organizations in social engineering attacks that often lead to data theft within hours of initial contact, according to a new report by cybersecurity firm Mandiant. [...]
Emphere’s solution delivers AI-driven remediation to software companies to speed up releases.
The post Emphere Raises $2.1 Million for AI-Powered Vulnerability Remediation appeared first on SecurityWeek.
Information published.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: OWASP Agent Memory Guard: Stop AI agents from being weaponized through their own memory Agent Memory Guard is an open-source runtime defense layer that sits between an agent and its memory store, screen...
In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site. In early June, the group publicly published data they claimed had been obtained from Baker's SharePoint and Salesforce infrastructure including 103k uniqu...