> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)
Several security issues were discovered in t...
Will Jason Statham save us?
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
The FBI has warned of the danger from a new wave of phishing attacks generated by a tool called Kali365.
It enables cyber criminals to obtain Microsoft 365 access tokens and bypass multi-factor authentication (MFA) protocols without intercepting the user’s credentials by ca...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks.
The disruption of First VPN Service was led by France...
Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, and disinformation campaigns. [...]
Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites.
The post Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure appeared first on SecurityWeek.
Kaspersky experts have discovered an unpatchable vulnerability in popular Qualcomm chips used in smartphones, cars, smart devices, industrial equipment, and much more. We explain what this vulnerability is and what device owners should do.
European authorities have cracked down on a VPN that has been used for various criminal activities.
The operation, led by investigators in France and the Netherlands with help from Europol and Eurojust, has dismantled First VPN, a service that has been heavily promoted with...
Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiving the highest scores in both the current offering and strategy categories.
The post Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platfo...
A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence server for credential theft and identity compromise. Learn how the threat actor attempted Kerberos relay and lateral movement, and how Microsoft Defender detected, blocked, and...
L'Autorité de protection des données personnelles a publié une décision de sanction à l'encontre de Vodafone (comprenant le prononcé d'une amende de 20 000 €) et d'une personne physique (amende de 2 000 €) pour des manquements en lien avec l'obligation d'information et le droit d'accès. Cette affair...
L'autorité italienne, le Garant pour la protection des données personnelles (GPDP), a publié une décision de sanction à l'encontre du Ministère de la Justice, comprenant le prononcé d'une amende de 12 000 €, pour des manquements en lien avec la communication illicite de données de santé d'un employé...
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub acc...
Le Conseil d'État a partiellement annulé et réformé une sanction de la Commission nationale de l'informatique et des libertés (CNIL) à l'encontre de la société Tagadamedia concernant ses pratiques de recueil du consentement pour la prospection commerciale.La société Tagadamedia, qui collecte des don...
L'autorité croate de protection des données (AZOP) a publié des recommandations détaillant les conditions d'application de l'intérêt légitime comme base juridique pour le traitement des données personnelles.S'appuyant sur les lignes directrices 1/2024 du Comité européen de la protection des données...
According to users on X, the website was hijacked by hackers in an attempt to trick visitors into installing malware.