> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Les autorités de protection des données des pays nordiques ont publié une déclaration commune suite à leur réunion annuelle des 21 et 22 mai 2026 à Stockholm, définissant leurs axes de coopération prioritaires.Les discussions ont été marquées par le contexte géopolitique et l'émergence de nouveaux r...
L'Autorité nationale hongroise de la protection des données et de la liberté d'information (NAIH) a publié une décision de sanction à l'encontre de Mediaworks Hungary Zrt., comprenant le prononcé d'une amende de 50 000 000 forints (environ 127 000 €), pour des manquements en lien avec la publication...
So, you've enabled multi-factor authentication. You've taught your staff never to type their passwords into dodgy-looking login pages. Surely your Microsoft 365 accounts are safe now?
Well, think again.
Read more in my article on the Hot for Security blog.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'AMADEUS IT GROUP, S.A. (comprenant le prononcé d'une amende de 14 400 000 €) pour des manquements en lien avec l'information des personnes concernées et la base juridique d'un traitement de données à ...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'un vidéaste, comprenant le prononcé d'une amende de 500 €, pour l'utilisation de l'image d'une personne dans une vidéo publiée en ligne sans base légale. Cette affaire débute par une plainte déposée...
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
Several security issues were fixed in Samba.
Avec ce tutoriel, apprenez à utiliser WinGet sur Windows pour installer, désinstaller, mettre à jour et gérer les applications directement en ligne de commande.
Le post WinGet : gérer vos applications en ligne de commande sous Windows a été publié sur IT-Connect.
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026.
The activity targeted industrial and electronics manufacturing, education and public-sector bodies, financial...
The move to block the acquisition of the cloud company that hosts the Dutch digital ID service comes as Europe continues to reduce its reliance on U.S. technology.
A shadowy group that stole and dumped the NSA’s most powerful hacking tools still has implications for how companies think about digital risk today.
Microsoft a publié un nouveau correctif de sécurité pour patcher une faille de sécurité RCE affectant plusieurs versions de SharePoint : CVE-2026-45659.
Le post Faille RCE dans SharePoint : Microsoft publie un patch pour la CVE-2026-45659 a été publié sur IT-Connect.
An Israeli cybersecurity firm said Iran’s government is behind Ababil of Minab, a fake hacktivist persona that has claimed a series of data breaches after the start of the war in Iran.
Early results show a tenfold jump in bug discovery at some partners, and a widening gap between finding flaws and fixing them.
The post Anthropic: Mythos finds more than 10,000 software flaws in first month appeared first on CyberScoop.
Not identifying people based on their use of Wi-Fi routers, but identifying people using Wi-Fi signals.
This is accomplished through what is known as WiFi sensing, or the use of WiFi signals to infer information about a physical environment. When radio signals like WiFi travel through a space, they...
Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets
Anthropic and its Project Glasswing partners have identified more than 10,000 high- or critical-severity vulnerabilities in critical software systems, the company announced in an update on the project’s progress. Mythos identifies thousands of high-severity vulnerabilities In April 2026, Anthropic i...
The Lithuanian Prosecutor General’s Office said Friday that attackers gained unauthorized access to more than 600,000 records managed by the Centre of Registers, the state agency responsible for handling property and legal entity records.
Chinese-language phishing-as-a-service (PhaaS) communities are expanding in an area historically dominated by Russian-speaking cybercriminal groups. The Google Threat Intelligence Group (GTIG) analyzed a dozen active PhaaS offerings operating in Chinese-language underground communities and found mat...
A large-scale automated GitHub backdooring campaign was caught pushing thousands of malicious commits into public repositories while posing as routine CI/CD upkeep.
Researchers at SafeDep observed the campaign, Megalodon, touching more than five thousand repositories over a...