> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of security controls, cross-site scripting, denial of service, SQL injection, email header injection, information disclosure or code execution via PHP object deserialization. For the oldstable distribu...
A judge said Democrats and civil groups filed the lawsuit too early to demonstrate harm, but that could change after newly proposed postal regulations.
The post USPS moving forward with mail-in ballot changes as courts weigh Trump’s election order appeared first on CyberScoop.
Oracle has released the first security fixes in its new monthly Critical Security Patch Update (CSPU) cycle, designed to address urgent vulnerabilities that can’t wait for the company’s quarterly patching. The initial batch addresses 35 flaws, including several for which explo...
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy network and facilitate cybercrime.
The post Dutch Police Dismantle Massive 17-Million-Device Botnet appeared first on SecurityWee...
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm.
"This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of insta...
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta's "AI support assistant" bot into resetting ac...
Hackers stole usernames, hashed passwords, and other data from a service that allowed players to cheat in Grand Theft Auto V.
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre du Conseil National des Experts Industriels et des Experts Industriels Diplômés (CNPI), comprenant le prononcé d'une amende de 3 000 €, pour des manquements liés à la gestion de la boîte de messageri...
L'Autorité pour la protection des données personnelles (GPDP) a publié une décision de sanction à l'encontre de Nuova Corrente S.r.l., comprenant le prononcé d'une amende de 15 000 €, pour des manquements liés à la prospection commerciale, à la gestion de ses sous-traitants et au respect des droits...
Yubico announced its significant role in securing the AI frontier as OpenAI mandates the use of passkeys for individuals that are part of their Trusted Access for Cyber (TAC) program. As a leading global AI research and development company, OpenAI is setting a precedent for empowering its users to t...
L'Autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Pianeta s.r.l., comprenant le prononcé d'une amende de 34 000 €, pour des manquements liés à l'utilisation de données issues d'un programme de fidélité à des fins disciplinaires et au n...
L'Autorité suédoise de protection de la vie privée (IMY) a organisé une table ronde pour discuter de la réglementation suédoise relative au traitement des données concernant les infractions pénales.Cette table ronde, tenue le 1er juin 2026, a réuni des représentants de diverses organisations, dont l...
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data. [...]
L'autorité maltaise de protection des données (IDPC) publie une communication à l'occasion du 10ème anniversaire de l'adoption du RGPD, revenant sur l'évolution du cadre européen de protection des données.Le 27 avril 2026 a marqué le 10ème anniversaire de l'adoption du RGPD, premier cadre complet de...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA, comprenant le prononcé d'une amende de 650 000 €, pour des manquements en lien avec la sécurité des données personnelles suite à une violation de don...
We investigated why firmware updates were causing our core servers to take four hours to reboot. By diving into UEFI data structures and iPXE automation, we eliminated unnecessary timeouts and cut boot times back down to minutes.
New article: “Responsible Disclosure in the Age of AI: A Call for Urgent Action,” by Melissa Hathaway.
Abstract: Artificial intelligence is fundamentally reshaping the balance between vulnerability discovery and remediation. Frontier AI models are now capable of autonomously identifying exploitable...
Football fans are counting down the days until the FIFA World Cup begins, and scammers are doing the same. Last week, the FBI warned that cybercriminals are spoofing FIFA websites to steal personal information, sell fake tickets, and promote fraudulent hospitality packages ahead of the tournament. W...
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the
fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Little CMS incorrectly handled certain malformed ICC
profiles. An attacker could use th...
Amazon Web Services (AWS) is pleased to announce that the Spring 2026 System and Organization Controls (SOC) 1, 2, and 3 reports are now available. The reports cover 188 services over the 12-month period from April 1, 2025–March 31, 2026, giving customers a full year of assurance. These reports demo...