> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
There have been reports of threat actors using a .wav file as a vector for malware.
Credential stuffing is a cyberattack where attackers use stolen usernames and passwords, often obtained from data breaches or bought on the dark web, to gain unauthorized access to accounts on other platforms. These attacks are highly prevalent and a major contributor to data breaches, largely becau...
La fuite attribuée à TfL expose près de 10 millions de profils et relance le débat sur la transparence après une cyberattaque.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation.
The list of vulnerabilities is as fo...
And China is loving it Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations.…
1 700 policiers visés après des accès injustifiés à des systèmes liés à une enquête sensible.
Imposer aux télécoms de notifier toute cyberattaque en quatre heures à partir de février 2027.
Le nouveau Mozilla Firefox 150 apporte plusieurs nouveautés, notamment au sein du lecteur PDF, de la vue scindée, ou encore de la gestion des accès au réseau.
Le post Firefox 150 est disponible : découvrez les nouveautés principales a été publié sur IT-Connect.
Un bug a exposé des documents policiers sensibles en Nouvelle-Zélande, révélant un risque majeur pour victimes et enquêtes.
Scammers dressed up like Catholic Charities and legitimate pro bone legal services on social media platforms are targeting immigrants and bilking them for money. Manhattan DA Alvin Bragg is pressing Meta to follow its own terms and shut them down.Â
The post Manhattan DA Bragg Pushes Meta to Put a S...
Vous avez l'habitude de publier des pages sur le web avec Notion ? Sachez que n'importe qui peut récupérer des informations personnelles sur les éditeurs.
Le post Les sites Notion divulguent les photos de profil et les e-mails des éditeurs a été publié sur IT-Connect.
This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3.
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The ZDI has assigned a CVSS rating of...
Dimanche 19 avril 2026, Microsoft a publié en urgence des mises à jour hors bande pour Windows Server afin de patcher un problème affectant Active Directory.
Le post Windows Server – Avril 2026 : de nouveaux correctifs pour stabiliser l’Active Directory a été publié sur IT-Connect.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PublicCMS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2.
Microsoft a publié les nouvelles mises à jour Windows Server le 14 avril 2026, dont la KB5082063. Voici les principaux changements à anticiper et à connaître.
Le post Le point sur les mises à jour d’avril 2026 pour Windows Server a été publié sur IT-Connect.
Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique called Secure Multi-Party Computation (MPC) makes this possible. It splits data into encrypted fragments...
Application Security Engineer (DevSecOps / Azure DevOps) BEWAHARVEST | Philippines | Hybrid – View job details As an Application Security Engineer (DevSecOps / Azure DevOps), you will embed security across the SDLC by working with engineering and DevOps teams to implement automated security controls...