> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
De multiples vulnérabilités ont été découvertes dans Spring Cloud Config. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
A malicious imitation of Anthropic’s Claude site leads to DLL sideloading – and a backdoorCategories: Threat ResearchTags: Claude, Beagle, Backdoor, malvertising, AI, DONUT, DLL sideloading, Sophos X-Ops
De multiples vulnérabilités ont été découvertes dans Ivanti Endpoint Manager Mobile (EPMM). Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données. L'éditeur indique...
De multiples vulnérabilités ont été découvertes dans GLPI. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une falsification de requêtes côté serveur (SSRF) et une injection de code indirecte à distance (XSS).
Unit 42 details CVE-2026-0300, a buffer overflow vulnerability in the PAN-OS User-ID Authentication Portal. Read now for details.
The post Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution appeared first on Unit 42.
L'entreprise de construction Heberger, basée à Schifferstadt, a été victime d'une cyberattaque la semaine dernière. L'incident, confirmé par une porte-parole de l'entreprise, aurait eu lieu le jeudi 7 mai tôt le matin. Malgré des normes élevées en matière de sécurité informatique, l'entreprise a été...
Le District de Santé Public de Champaign-Urbana a détecté une activité suspecte sur son réseau informatique début mai. Une personne non autorisée a copié des fichiers, potentiellement contenant des informations personnelles des résidents, telles que des numéros de sécurité sociale, des informations...
Meta's smart glasses promise privacy "designed for you" - but everything they record was being beamed off to workers in Nairobi to label by hand. When those workers blew the whistle, Meta sacked all 1,108 of them.
Meanwhile, the IT press is in a frenzy over a new Linux bug called "Copy Fail" - co...
Taiwan high‑speed rail was disrupted after a 23‑year‑old student spoofed signals and triggered an emergency alarm, stopping four trains for nearly an hour. Taiwan high‑speed rail system, one of the most important pieces of national infrastructure, was thrown into chaos during the Qingming Festival h...
Last week, we released apkeep version 1.0.0, the latest edition of our command-line Android package downloading software. Rather than indicating major changes for the project, this milestone instead signifies arriving at a relatively stable and mature place after gradual iteration on the project ove...
Microsoft Teams Calling is getting a new feature that will warn users about suspicious inbound VoIP calls from first-time external callers who might be impersonating trusted brands.
The post Teams calls are about to get a lot harder to fake appeared first on Help Net Security.
A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy's platform for managing fleets of WordPress websites. [...]
To stop children from bypassing its age checks, Meta is revamping its age-verification tools with an AI system that analyzes images and videos for “visual cues,” such as height and bone structure.
Multiple vulnerabilities have been discocvered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code. For the oldstable distribution (bookworm), a subset of these problems have been fixed in version 4.0.17-0+deb12u3.
Researchers say Schemata’s platform exposed names, emails, base assignments, and course materials before the company patched the issue and contacted government authorities.
The post A DOD contractor’s API flaw exposed military course data and service member records appeared first on CyberScoop.
Romanian citizen Gavril Sandu was extradited to the U.S. nearly 17 years after a hacking scheme. He was indicted in 2017 and arrested in 2026. Romanian national Gavril Sandu, 53, has been extradited to the United States for his role in a hacking scheme that took place 17 years ago. “On November 14,...
A patch for the bug, tracked as CVE-2026-0300, has not been published yet and Palo Alto Networks said it will be included in releases over the next two weeks.
Several security issues were fixed in Apache HTTP Server.
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service (DDoS) attacks.
Hunt.io, which detailed the mal...
Quiberon frappée par une cyberattaque attribuée à Qilin, groupe lié à de nombreuses victimes françaises.