> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights significant threats, notably the FBI's attribution of the record $6.3 billion Binance crypto heist to North Korean hackers, known as TraderTraitor. This breach underscores the ongoing risk posed by state-sponsored cybercriminals in the cryptocurrency sector. Additionally, a new vulnerability in Android, dubbed "SMS of Death," allows attackers to crash call services through a hidden message, posing a severe risk to users. In other news, hackers exploited a critical flaw in Canonical's LXD, enabling unauthorized logins as trusted clients. Furthermore, malicious code on Polymarket's website led to the theft of approximately $2.7 million from traders, showcasing vulnerabilities in online platforms. Lastly, a sophisticated malware campaign targeting government systems in Asia has been identified, underscoring the evolving nature of cyber threats.
|
// AI-powered summary generated at 20:00
L'association None of Your Business (noyb) a publié son rapport annuel pour 2025, qui détaille ses actions juridiques, ses travaux politiques et les décisions obtenues au cours de l'année.En 2025, l'organisation a initié les préparatifs pour son premier recours collectif visant l'agence de notation...
La Commission Nationale de la Protection des Données (CNPD) du Portugal a participé à un atelier européen portant sur les méthodologies d'évaluation d'impact des systèmes d'intelligence artificielle.La CNPD a pris part à la 24ème réunion des Autorités de Surveillance de la Protection des Données d'E...
Learn how SOC audits work, the difference between SOC 1 vs SOC 2 compliance, and what type you need.
Le Comité européen de la protection des données (CEPD) a publié une déclaration sur les défis que représentent les lunettes intelligentes pour la protection des données.Le CEPD a adopté cette déclaration lors de sa plénière, accompagnée d'un rapport intitulé "Le regard connecté. Enregistrement vidéo...
Une autorité publique ne peut se fonder sur une obligation légale de transparence pour publier des données personnelles si les actes concernés ne sont pas explicitement visés par la loi, un tel traitement étant alors dépourvu de base légale et justifiant l'exercice du droit à l'effacement.Faits et c...
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python clien...
Dans une décision sanctionnant deux sociétés pour un total de 155 000 €, l'Autorité hellénique de protection des données analyse en détail les manquements liés à l'utilisation secondaire d'images de vidéosurveillance à des fins judiciaires et à l'obstruction délibérée du droit d'accès d'une personne...
In an extremely disappointing ruling, a California trial court dismissed SIREN v. San Jose, our case challenging the city of San Jose’s warrantless searches of its vast stores of Automatic License Plate Reader (ALPR) data. EFF and the ACLU of Northern California represent SIREN and CAIR California,...
Anthropic took more than two months to alert cops
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek.
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.Â
The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek.
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials.
"Your configuration becomes vali...
Participants said it was the largest joint scam operation to date and the first focused on the region.
The post West African scammers targeted in joint international government-industry operation appeared first on CyberScoop.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.