> TODAY'S SUMMARY (22 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Fireworks AI has reported a breach stemming from a third-party cloud hack, emphasizing the risks associated with relying on external providers. France has attributed a cyberattack that affected supermarket refrigeration systems to Iranian operatives, signaling geopolitical tensions in cyberspace. Meanwhile, CISA has warned of active exploitation of multiple security flaws in key software, including OpenSSH and IBM products. Additionally, N-able has taken its N-central Cloud offline after the disclosure of 33 zero-day vulnerabilities. On the consumer side, a data breach at Iris Ohyama may expose personal information of 7.7 million individuals. Lastly, Google has issued a security update for Chrome, addressing the eighth actively exploited zero-day this year.
|
// AI-powered summary generated at 08:00
Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to run commands or arbitrary code. [...]
Microsoft has released Windows 11 KB5089549 and KB5087420 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. [...]
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
The post Microsoft Patches 137 Vulnerabilities appeared first on SecurityWeek.
Today is Microsoft's May 2026Â Patch Tuesday, with security updates for 120 flaws and no zero-days disclosed this month. [...]
Exaforce has raised a total of $200 million and plans on using the latest investment for product development and international expansion.Â
The post Exaforce Raises $125 Million for Agentic SOC Platform appeared first on SecurityWeek.
The TeamPCP threat group has pulled off another big supply chain attack which within a few hours this week was able to successfully compromise 170 Node Package Manager (npm) and PyPI packages.
The attack affected the entire TanStack Router ecosystem (@tanstack) of 42 packag...
Å koda Auto, a wholly owned subsidiary of the Volkswagen Group, has disclosed a data breach after attackers hacked its online shop and stole the personal information of an undisclosed number of customers. [...]
Intrusion Logging is a new part of Android’s Advanced Protection Mode, which aims to help protect human rights activists, journalists, and dissidents from government spyware attack and law enforcement forensic devices.
Intrusion Logging marks the first feature from a major device vendor to aid with forensic detection of sophisticated threats, Amnesty International said.
The post Google and Amnesty International teamed up to make it harder for spyware vendors to hide appeared first on CyberScoop.
Android 17, expected to roll out next month, will introduce several security and privacy features focused on device theft, threat detection, and banking scam calls. [...]
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 12 mai 2026.
Partie I (avec débats): :
* Bilan de l’activité des plaintes et de l’exercice des droits indirect sur l’année 2025.
Partie II (sans débats): :
* Exame...
La Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) du Maroc a présenté les conclusions de ses travaux sur la protection des informations génomiques.Entre 2023 et 2025, la CNDP a collaboré avec un groupe d'experts comprenant des généticiens et des représenta...
The report, released by the advocacy group Human Rights Watch on Tuesday, alleges that the European Commission has failed to effectively police member states' surveillance tech sales despite the 2021 implementation of updated bloc-wide export rules designed to rein in the practice.
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre de la société Isabel SA, comprenant le prononcé d'une amende de 120 000 €, pour des manquements liés à son service d'identification et d'authentification TruliUs, notamment son auto-qualification erronée en tan...
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre de la Société Wallonne des Eaux (SWDE), comprenant le prononcé d'une amende totale de 86 000 €, pour des manquements liés à l'enregistrement d'appels téléphoniques à des fins de contrôle qualité et de formation...
This week, Apple released iOS 26.5, an update that supports end-to-end encryption for Rich Communication Services (RCS), meaning conversations between Android and iPhone will soon be encrypted in the default chat apps. This has been a long time coming, and is a welcome delivery on a promise both Goo...
L'Autorité de protection des données (APD) a publié une décision de sanction à l'encontre d'une société, comprenant le prononcé d'une amende de 176 946,61 €, pour des manquements liés à la gestion de la boîte de messagerie professionnelle d'une ancienne consultante après son départ. Cette affaire dé...
While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution.
The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek.
Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution.
Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email.
The vulnerabi...