> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache
HTTP Server incorrectly handled certain memory operations when using the
HTTP/2 protocol. A remote attacker could use this issue to cause Apache
HTTP Server to crash, resulting in a denial of service, or possibly execute
arbitrary...
The vendor hasn’t released a patch for the vulnerability or described the scope and objective of confirmed attacks.
The post A critical Palo Alto PAN-OS zero-day is being exploited in the wild appeared first on CyberScoop.
We have released our latest compliance guide, ISO/IEC 42001:2023 on AWS, which provides practical guidance for organizations designing and operating an Artificial Intelligence Management System (AIMS) using AWS services. As organizations deploy AI and generative AI workloads in the cloud, aligning w...
nghttp2 could be made to crash if it received specially crafted network traffic.
USN-8233-1 fixed a vulnerability in nghttp2. This update provides the
corresponding update for Ubuntu 26.04 LTS.
Original advisory details:
Andrew MacPherson discovered that nghttp2 did not properly validate
internal state when the session termination API was called. A remote
attacker could pos...
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. [...]
Cuts appear to hit sales, product, and marketing, accounting for under 10% of staff
U.S. prosecutors said a ransomware gang fueled Russian government corruption, and allowed the gang's leaders to avoid paying taxes and dodge the country's military draft.
EditorConfig could be made to crash if it opened a specially crafted file.
Cisco patched a Crosswork Network Controller and Network Services Orchestrator denial-of-service vulnerability that requires manually rebooting targeted systems for recovery. [...]
Braintrust, a startup that makes an “operating system for engineers building AI software,” notified customers that hackers broke into one of its Amazon cloud environments, and is asking customers to rotate their API keys.
Le piratage confirmé d'un hôtel de luxe d'un groupe français expose passeports, profils clients et accès techniques, révélant une faille majeure dans la promesse de discrétion.
13% say they’ve sold logins or know someone who has, survey suggests
It was discovered that EditorConfig incorrectly handled specially crafted
configuration files. A local attacker could possibly use this issue to
cause EditorConfig to crash, resulting in a denial of service.
The initiative, named CI Fortify, focuses on isolation and recovery efforts that would see critical infrastructure organizations proactively disconnect from third-party dependencies and find ways to operate without reliable telecommunications and internet.
L’autorité italienne de protection des données personnelles (GPDP) a publié une décision de sanction à l’encontre d’Esselunga S.p.A. (comprenant le prononcé d’une amende de 5 000 €) pour des manquements relatifs au droit d’accès aux données personnelles. Cette affaire débute par une plainte déposée...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la commune de Cassino, comprenant le prononcé d'une amende de 2 500 €, pour des manquements en lien avec la publication en ligne de données personnelles, notamment financières, dans une délibérati...
On May 5, 2026, DENIC published broken DNSSEC signatures for the .de TLD, making millions of domains unreachable. Here's what 1.1.1.1 saw, how serve stale cushioned the impact, and how we restored resolution.
L’autorité belge de protection des données (APD) a publié une décision de sanction à l’encontre d’une entreprise employant un technicien, comprenant le prononcé d’une réprimande pour des manquements relatifs au droit d’accès aux données personnelles. Cette affaire débute par une plainte déposée le 2...
L'Autorité norvégienne de protection des données (Datatilsynet) a communiqué sur une intrusion de données d'envergure visant la plateforme d'apprentissage Canvas, fournie par la société Instructure et affectant de nombreux établissements d'enseignement supérieur.Suite à une attaque numérique ciblée...