> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
The release includes implementations of two quantum-secure algorithms and demonstrates how formal verification caught bugs that traditional testing would have missed.
The post Apple open-sources quantum-resistant encryption code appeared first on CyberScoop.
A Trump administration memo published last week replaces one from its predecessor, with at least one analyst fearful of potential harmful results.
The post White House charts new course for federal agencies and cybersecurity logging appeared first on CyberScoop.
It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)
Several security issues were discovered in t...
May 26, 2026: This post was originally published in July 2022. It has been updated to reflect current engagement options, new threat intelligence resources such as the Threat Technique Catalog for AWS (TTC), additional open-source tools, and the distinction between AWS CIRT support and the AWS Secur...
It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)
Several security issues were discovered in t...
Dnsmasq could be made to crash or run programs if it received specially crafted network traffic.
libssh2 could be made to crash if it received specially crafted network traffic.
It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)
Several security issues were discovered in t...
It was discovered that libssh2 incorrectly handled username and password
length values during SSH password authentication. A remote attacker could
possibly use this issue to cause a denial of service.
Guess they could deny the alleged intrusion … like the 2020 election results
USN-8167-1 fixed a vulnerability in xdg-dbus-proxy. This update
provides the corresponding update for Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that xdg-dbus-proxy incorrectly handled eavesdropping
in policy rules. A local attacker could possibly use this issue to
intercept...
It was discovered that Dnsmasq incorrectly handled BOOTREPLY packets when
configured with the --dhcp-split-relay option. A remote attacker could
use this issue to cause Dnsmasq to crash, resulting in a denial of
service, or possibly execute arbitrary code.
TOTP generates secure 2FA codes that expire in seconds. Learn about how it works and its benefits over other 2FA methods.
A 5-year study on the Ransomware Economy found that 30,515 exposed databases were hit by ransom attacks, causing massive damage despite victims never paying. Database extortion doesn’t look like the ransomware stories that usually grab headlines. There’s no slick branding, no leak-site countdown, no...
It was discovered that ONNX did not properly validate paths when extracting
tar archives during model downloads. An attacker could possibly use this
issue to overwrite arbitrary files on the system.
Some internet connectivity is returning in Iran after nearly 90 days offline, web monitoring groups say. But it isn’t clear if the reconnection is permanent.
Learn what an HMAC-based one-time password (HOTP) is, how it works, and how it differs from other OTP authentication methods.
There have been multiple notable supply chain attacks using the npm Registry since September: Shai-Hulud, Chalk/Debug, one abusing tea.xyz tokens, and recently axios. Thanks to community efforts involving the Amazon Inspector team, the Open Source Security Foundation, and others, the affected packag...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une mise à jour des méthodologies de référence MR-001 et MR-003, adaptant le cadre des recherches en santé aux évolutions du secteur.Cette révision, datée du 26 mai 2026, vise à simplifier les démarches pour les acteurs public...