> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
Information published.
Information published.
Le dimanche 3 mai 2026, le systÚme informatique de la municipalité de Quiberon a été frappé par une cyberattaque orchestrée par le ransomware Qilin.
Le post La Ville de Quiberon nouvelle victime du ransomware Qilin a été publié sur IT-Connect.
Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico.
The post Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion appeared first on SecurityWeek.
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode c...
Que ce soit sur macOS, Windows ou Linux, Google Chrome télécharge un modÚle d'intelligence artificielle : Gemini Nano, d'une taille de 4 Go, sans votre accord.
Le post Gemini Nano : Google Chrome déploie une IA de 4 Go, sans rien vous demander a été publié sur IT-Connect.
This year marks the 10th anniversary of the EUâs adoption of the General Data Protection Regulation, which became mandatory for all companies beginning on May 25, 2018.
The aim of the GDPR was simple, but important: to improve individualsâ control over their personal data....
How come itâs still possible to âsecureâ an online account with a six-digit string?
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Palo Alto Networks PAN-OS, tracked as CVE-2026-0300 (CVSS scor...
In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group. The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of em...
Several security issues were fixed in Slurm.
Several security issues were fixed in Swish-e.
Palo Alto Networks (PAN-OS) : une faille de sécurité zero-day (CVE-2026-0300) exploitable sans authentification et déjà exploitée par des cybercriminels.
Le post Palo Alto Networks alerte sur une nouvelle zero-day déjà exploitée (CVE-2026-0300) a été publié sur IT-Connect.
Une vulnérabilité a été corrigée dans Slider Revolution, un plugin WordPress. Elle permet un attaquant de compromettre totalement un site web.
Le post WordPress : le plugin Slider Revolution doit ĂȘtre mis Ă jour (CVE-2026-6692) a Ă©tĂ© publiĂ© sur IT-Connect.
Pythonic Model Context Protocol servers handle tool calls, session events, module imports, and subprocess activity. BlueRock has released MCP Python Hooks, an open source runtime sensor that gives developers a way to capture those signals without modifying application code. What the sensor captures...
A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the sandbox and execute arbitrary code on susceptible systems.
vm2 is an open-source library used to run untrusted JavaScript code inside a secure sandbox by...
Application teams are moving AI inference into production systems that support business operations. Enterprises are expanding traffic management, identity controls, observability, and routing systems for multiple AI models and environments. F5âs 2026 State of Application Strategy Report found that 7...
The tentative deal responds to industry criticism by postponing enforcement of rules governing so-called âhigh-riskâ AI tools involving biometrics and those used in employment, law enforcement and critical infrastructure to December 2027.
It was discovered that Expat, vendored in ITK incorrectly handled certain
files. An attacker could possibly use this issue to cause a crash or
execute arbitrary code. (CVE-2022-25235, CVE-2022-25236)
It was discovered that Expat, vendored in Coin3D incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code.