> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Le Parlement français examine une proposition de loi visant à interdire l'accès aux réseaux sociaux aux mineurs de moins de 15 ans, ce qui impliquerait la mise en place d'un contrôle d'âge pour tous les utilisateurs.Cette proposition de loi, initialement présentée fin 2025 par une députée, a été rep...
L'autorité de protection des données personnelles italienne (GPDP) a publié une décision de sanction à l'encontre d'une médecin, comprenant le prononcé d'une amende de 5 000 €, pour des manquements en lien avec la diffusion en ligne de données de santé relatives à un patient mineur décédé. Cette aff...
For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that's no longer the case.
Read more in my article on the Fortra blog.
L'autorité italienne de protection des données personnelles (GPDP) a publié une décision de sanction à l'encontre de The European House - Ambrosetti S.p.A., comprenant le prononcé d'une amende de 85 000 €, pour des manquements en lien avec la sécurité du traitement, la limitation de la conservation...
L'autorité britannique de protection des données, l'Office du Commissaire à l'Information (ICO), a exprimé ses préoccupations concernant l'insuffisance des mesures de vérification de l'âge mises en place par plusieurs grandes plateformes en ligne.En mars, l'autorité a contacté TikTok, Snapchat, Face...
Acting director Nick Andersen’s comments came as a wave of malware attacks hit tech that’s publicly available for collaboration.
The post CISA chief frets about open-source vulnerabilities, delayed security improvements appeared first on CyberScoop.
La Cour administrative fédérale autrichienne (BVwG) a confirmé une décision de l'autorité de protection des données du pays, ordonnant à la Société autrichienne de radiodiffusion (ORF) de rendre sa bannière de cookies sur le site ORF.at conforme au RGPD.L'affaire trouve son origine dans une plainte...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'Association Mouvement Cinq Étoiles Sicile, comprenant le prononcé d'une amende de 5 000 €, pour des manquements en lien avec l'information des personnes concernées et l'exercice de leurs droits....
Cloudflare now integrates with the Claude Compliance API, so that security teams can monitor Claude Enterprise activity directly in the Cloudflare Dashboard.
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Carlo Maria Antonio Parisi, en sa qualité de responsable du quotidien d'information en ligne "Giornalisti Italia" (comprenant le prononcé d'une amende de 2 500 €) pour des manquements en lien avec...
Explore the real cost of a data breach for UK businesses and the long-term impact of compromised credentials.
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intellige...
Microsoft has open-sourced two tools aimed at bringing security discipline to AI agent development: Clarity, a structured design review tool, and RAMPART, a continuous testing framework. The release comes from Microsoft’s AI Red Team, the company’s internal unit that stress-tests its own AI systems,...
Officials arrested the alleged administrator of First VPN, seized its servers and domains. Europol said the service appeared in almost every major recent cybercrime investigation.
The post European authorities take down prolific cybercrime VPN service appeared first on CyberScoop.
A group used Anthropic’s Mythos AI model to help find a kernel memory corruption vulnerability and exploit on Apple’s M5.
News article.
Microsoft Security’s latest updates extend visibility, control, and protection across expanding ecosystems as organizations accelerate AI adoption.
The post What’s new in Microsoft Security: May 2026 appeared first on Microsoft Security Blog.
Managing identities and access across complex environments has become more critical than ever. AWS Directory Service for Managed Microsoft Active Directory, also known as AWS Managed Microsoft AD, has added new capabilities to manage users and groups. Now, you can perform create, read, update, and d...
First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol
Learn more about AI agents, including their uses, risks, and how to safely integrate them into your daily life and workflows.
Bubblewrap could be made to bypass sandbox restrictions.