> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Copacabana s.r.l., exploitant le restaurant « Copacabana », comprenant le prononcé d'une amende de 2 000 €, pour des manquements en lien avec l'installation d'un système de vidéosurveil...
La Conférence des autorités indépendantes de protection des données de la Fédération et des Länder (DSK) exhorte les législateurs de l'Union européenne et le gouvernement fédéral allemand à renoncer définitivement au projet de contrôle des communications privées.Cette prise de position intervient en...
On May 5, 2026, DENIC published broken DNSSEC signatures for the .de TLD, making millions of domains unreachable. Here's what 1.1.1.1 saw, how serve stale cushioned the impact, and how we restored resolution.
L'autorité britannique de protection des données (ICO) a publié de nouvelles lignes directrices pour aider les autorités publiques à traiter les demandes d'accès à l'information générées par intelligence artificielle.Cette publication répond à l'augmentation du volume et de la complexité des demande...
L'Agence Espagnole de Protection des Données (AEPD) a présenté son rapport annuel pour 2025, révélant une augmentation record de son activité, notamment en matière de réclamations et de sanctions.L'autorité a enregistré 30 931 réclamations en 2025, soit une hausse de 64 % par rapport à l'année précé...
An Iranian state-sponsored espionage group is pretending to be a regular ransomware gang in a new wave of ransomware attacks targeting enterprises.
APT group MuddyWater (aka Seedworm) is masquerading as the Chaos ransomware-as-a-service group to confuse incident response an...
Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain attack and released a new, malware-free version. [...]
On April 18th, 2026, we received a submission for an Authenticated Arbitrary File Upload vulnerability in Slider Revolution, a WordPress plugin. Although the plugin has more than 5,000,000 active installations, we estimate that only around 45,000 sites are using a vulnerable version, as the issue wa...
Shinyhunters menace Instructure et Canvas : écoles citées, pays concernés, risques cyber et lecture renseignement.
Google Chrome writes a 4GB AI model to users’ devices without asking, and reinstalls it if you delete it.
We'd all like the internet to be a better place—for kids and adults alike. But in the name of online safety, governments around the world are racing to impose a dangerous new system of control. Are age gates the silver bullet to the internet's problems they're being promoted as? Or are we being sold...
MOIS-linked cyber outfit puts on a ransomware show to disguise the wide-open backdoor behind the scenes
Read the latest DFIR news – WAInsight WhatsApp forensics, Volatility3 and Hindsight updates, cloud forensics challenges, and more.
Apprenez à mettre en place des règles de filtrage sur Proxmox VE avec le pare-feu intégré, afin de protéger le serveur, les VM et les conteneurs.
Le post Proxmox VE – Protégez votre serveur et les VM avec le pare-feu natif a été publié sur IT-Connect.
Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report, as we see automation and AI as core components of the future of cybersecurity.
The post ​​Microsoft named an overall leader in Kuppinger...
Dynaconf could be made to execute arbitrary code.
Sysdig announced headless cloud security, a cyberdefense platform designed for the agentic AI era. Sysdig Headless Cloud Security enables customers to drop the traditional, one-size-fits-all UI approach and equip their AI agents as the primary operators of machine-speed, data-driven cyberdefense. Ov...
It's not just you. Scammers, hackers, and other cybercriminals are complaining about “AI shit” flooding platforms where they discuss cyberattacks and other illegal activity.
Une nouvelle menace cible l'application Mobile Connecté de Microsoft, utilisant CloudZ RAT et Pheno pour exfiltrer discrètement vos données mobiles sur Windows.
Le post CloudZ RAT : ce malware espionne vos SMS via l’application Mobile Connecté de Windows a été publié sur IT-Connect.
Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands. This campaign evades traditional defenses by stealing credentials, wallets, and sensitive data.
The post ClickFix campaign uses fake macOS utilities lures to deliver infostealers...