> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
Learn what an HMAC-based one-time password (HOTP) is, how it works, and how it differs from other OTP authentication methods.
There have been multiple notable supply chain attacks using the npm Registry since September: Shai-Hulud, Chalk/Debug, one abusing tea.xyz tokens, and recently axios. Thanks to community efforts involving the Amazon Inspector team, the Open Source Security Foundation, and others, the affected packag...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une mise à jour des méthodologies de référence MR-001 et MR-003, adaptant le cadre des recherches en santé aux évolutions du secteur.Cette révision, datée du 26 mai 2026, vise à simplifier les démarches pour les acteurs public...
Les autorités de protection des données des pays nordiques ont publié une déclaration commune suite à leur réunion annuelle des 21 et 22 mai 2026 à Stockholm, définissant leurs axes de coopération prioritaires.Les discussions ont été marquées par le contexte géopolitique et l'émergence de nouveaux r...
So, you've enabled multi-factor authentication. You've taught your staff never to type their passwords into dodgy-looking login pages. Surely your Microsoft 365 accounts are safe now?
Well, think again.
Read more in my article on the Hot for Security blog.
L'Autorité nationale hongroise de la protection des données et de la liberté d'information (NAIH) a publié une décision de sanction à l'encontre de Mediaworks Hungary Zrt., comprenant le prononcé d'une amende de 50 000 000 forints (environ 127 000 €), pour des manquements en lien avec la publication...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'AMADEUS IT GROUP, S.A. (comprenant le prononcé d'une amende de 14 400 000 €) pour des manquements en lien avec l'information des personnes concernées et la base juridique d'un traitement de données à ...
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'un vidéaste, comprenant le prononcé d'une amende de 500 €, pour l'utilisation de l'image d'une personne dans une vidéo publiée en ligne sans base légale. Cette affaire débute par une plainte déposée...
Several security issues were fixed in Samba.
Avec ce tutoriel, apprenez à utiliser WinGet sur Windows pour installer, désinstaller, mettre à jour et gérer les applications directement en ligne de commande.
Le post WinGet : gérer vos applications en ligne de commande sous Windows a été publié sur IT-Connect.
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026.
The activity targeted industrial and electronics manufacturing, education and public-sector bodies, financial...
The move to block the acquisition of the cloud company that hosts the Dutch digital ID service comes as Europe continues to reduce its reliance on U.S. technology.
A shadowy group that stole and dumped the NSA’s most powerful hacking tools still has implications for how companies think about digital risk today.
Microsoft a publié un nouveau correctif de sécurité pour patcher une faille de sécurité RCE affectant plusieurs versions de SharePoint : CVE-2026-45659.
Le post Faille RCE dans SharePoint : Microsoft publie un patch pour la CVE-2026-45659 a été publié sur IT-Connect.
An Israeli cybersecurity firm said Iran’s government is behind Ababil of Minab, a fake hacktivist persona that has claimed a series of data breaches after the start of the war in Iran.
Early results show a tenfold jump in bug discovery at some partners, and a widening gap between finding flaws and fixing them.
The post Anthropic: Mythos finds more than 10,000 software flaws in first month appeared first on CyberScoop.
Not identifying people based on their use of Wi-Fi routers, but identifying people using Wi-Fi signals.
This is accomplished through what is known as WiFi sensing, or the use of WiFi signals to infer information about a physical environment. When radio signals like WiFi travel through a space, they...
Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets
Anthropic and its Project Glasswing partners have identified more than 10,000 high- or critical-severity vulnerabilities in critical software systems, the company announced in an update on the project’s progress. Mythos identifies thousands of high-severity vulnerabilities In April 2026, Anthropic i...