[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Minnesota’s CISOs: Homegrown Talent Securing Finance, Insurance, and Beyond
Minnesota has produced a quietly strong CISO community, particularly in financial services and insurance. The leaders in this feature are based in the Twin Cities metro or built the core of their careers there, and their work spans credit unions, community banking, wealth management, payment technol...
> USN-8185-2: Linux kernel (Low Latency NVIDIA) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode c...
> Video site Vimeo blames security incident on Anodot breach
The hackers did not access video content, user logins or payment card information, and there was no disruption to Vimeo’s services,
> UODO - autorité polonaise
L'autorité polonaise de protection des données (UODO) a échangé avec des représentants de l'IAB Pologne et de l'IAB TECH LAB au sujet d'un nouveau mécanisme destiné à gérer les demandes de suppression de données dans le secteur de la publicité en ligne.Le 20 avril 2026, une réunion s'est tenue conce...
> US Supreme Court appears split over controversial use of ‘geofence’ search warrants
The U.S. top court is expected to rule on whether to allow police to identify criminal suspects by dragnet searching the databases of tech giants.
> How Identity, Geopolitics and Data Integrity Define Cyber Resilience 
A good cyber framework is built on the assumption that disruption is inevitable, so it must be capable of anticipating, absorbing, and adapting to it.  The post How Identity, Geopolitics and Data Integrity Define Cyber Resilience  appeared first on Security Boulevard.
> A practical guide to secure vibe-coding for small businesses | Kaspersky official blog
Configuration and prompting tips to get an AI assistant to write more secure code.
> The Mythos Moment: Enterprises Must Fight Agents with Agents
Only with the right platform and an agentic, AI-driven defense, will enterprises be able to protect themselves in the agentic era. The post The Mythos Moment: Enterprises Must Fight Agents with Agents appeared first on SecurityWeek.
> Rep. Delia Ramirez takes over as top House cybersecurity Dem
he replaces Rep. Eric Swalwell following his resignation, giving her the position of ranking member of the Subcommittee on Cybersecurity and Infrastructure Protection. The post Rep. Delia Ramirez takes over as top House cybersecurity Dem appeared first on CyberScoop.
> ShinyHunters claims it stole 1.4 million records from Udemy
The ShinyHunters group claims it has breached the Udemy, one of the world’s largest online learning platforms. According to Have I Been Pwned, the leaked dataset contained 1.4 million unique email addresses of customers and instructors, along with names, physical addresses, phone numbers, employer i...
> US reportedly charges Scattered Spider hacker arrested in Finland
A 19-year-old dual United States and Estonian citizen arrested in Finland earlier this month faces federal charges in the U.S. alleging he was a prolific member of the notorious Scattered Spider hacking collective. [...]
> Medtronic Confirms Data Breach After ShinyHunters Claims
Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda
> Webinar Today: A Step-by-Step Approach to AI Governance
Join the webinar to explore a practical, multi-layered roadmap to transition from fragmented AI usage to a governed, scalable ecosystem. The post Webinar Today: A Step-by-Step Approach to AI Governance appeared first on SecurityWeek.
> [un]prompted 2026 – Detection & Deception Engineering In The Matrix
Author, Creator & Presenter: Bob Rudis, V.P. Data Science, Security Research, & Detection+Deception Engineering At GreyNoise Labs & Glenn Thorpe, Sr. Director, Security Research & Detection Engineering At GreyNoise Intelligence Our thanks to [un]prompted for publishing their Creator...
> Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale
Police said on Monday the victims included both Ukrainian and foreign players whose accounts contained valuable digital items, rare equipment and in-game currency purchased with real money.
> Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data
Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub repository. [...]
> Robinhood Vulnerability Exploited for Phishing Attacks
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites. The post Robinhood Vulnerability Exploited for Phishing Attacks appeared first on SecurityWeek.
> Ubuntu 26.04 USN-8190-2 ruby-rack-session Critical Session Access Flaw
Rack::Session could allow unintended access to network services.
> The Breach Did Not Knock on the Front Door
Attackers are getting in. Security teams have long accepted that premise. What is unsettling is where they are entering from. They are coming through software packages that development teams trust by default, hijacking single sign-on accounts that serve as master keys to dozens of business applicati...
> Ubuntu 22 24 Dovecot Critical Regression Fix USN-8136-2
USN-8136-1 introduced a regression in Dovecot