Instructure paie ShinyHunters après l’attaque de Canvas, tandis que le Congrès enquête sur la réponse cyber.
CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”.
The post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek.
Educational tech firm Instructure reached a deal with hackers after a major Canvas breach exposed data stolen from schools and universities. Educational tech firm Instructure says it reached an agreement with the cybercrime group behind a major Canvas data theft, after attackers broke into its syste...
Fuite revendiquée contre la PACI au Koweït : données civiles, cartes sensibles et enjeu de renseignement.
Philippe shares his unique journey from French engineering school to the front lines of cybersecurity, explaining how his lifelong love for solving puzzles helps him uncover critical security flaws before they can be exploited.
West Pharmaceutical touché par un rançongiciel : données volées, production perturbée et enquête cyber en cours.
Foxconn confirme une cyberattaque en Amérique du Nord, revendiquée par Nitrogen, avec 8 To de données volées
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek.
UK cybersecurity sector reaches ÂŁ14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry
The annual CSO Awards annually recognize security projects that demonstrate outstanding security leadership and business value.
For this year’s program, CSO honors 64 security organizations whose hard work and innovative approaches have had a significant impact on how their...
The two chip giants have published over two dozen advisories describing recently identified security defects.
The post Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities appeared first on SecurityWeek.
Découvrez Retyc, une alternative européenne de transfert sécurisé, offrant chiffrement post-quantique, zero-knowledge, et hébergement européen souverain.
Le post Retyc : une alternative française à WeTransfer, chiffrée et sans IA a été publié sur IT-Connect.
Microsoft has patched 120 vulnerabilities in this month’s security update round
Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a data exfiltration channel rather than for malware distribution.
"The packages do not appear designed for mass developer com...
Willkommen im neuen, KI-geschwängerten Bedrohungszeitalter.Gorodenkoff / Shutterstock
Die Google Threat Intelligence Group (GTIG) warnt davor, dass kriminelle Hacker mittlerweile KI einsetzen – sowohl, um Schwachstellen aufzuspüren, als auch um anschließend Malware zu entwic...
Information published.
Information published.
More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users.
The post Hundreds of Malicious Packages Force RubyGems to Suspend Registrations appeared first on SecurityWeek.
Information published.
Information published.