> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a stack buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
La municipalité rurale de Gimli a informé ses résidents avoir été la cible d'une cyberattaque affectant ses systèmes informatiques. L'organisation a engagé une firme de cybersécurité pour enquêter sur l'incident et déterminer l'étendue des dégâts. Actuellement, le bureau municipal est incapable de t...
Vérifier une fuite de données avec ZATAZ : moteurs France et monde, veille premium et risques cyber.
Avril noir pour les forums pirates : HexDex risque 10 ans de prison, DarkForums visé par une fuite de données !
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one of its GitHub repos...
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump
Lawmakers in Congress are moving quickly on the GUARD Act, an age-gating bill restricting minors’ access to a wide range of online tools, with a key vote expected this week. The proposal is framed as a response to alarming cases involving “AI companions” and vulnerable young users. But the text of t...
Online trading platform Robinhood's account creation process was exploited by threat actors to inject phishing messages into legitimate emails, tricking users into believing their accounts had suspicious activity. [...]
New proftpd packages are available for Slackware 15.0 and -current to fix a security issue.
In April 2026, the hacking collective ShinyHunters claimed to have obtained data from Pitney Bowes as part of a broader extortion campaign that also named several other organisations. After negotiations allegedly failed, the group publicly released the data which included 8.2M unique email addresses...
Faux site Lens-Nice : ZATAZ révèle une fausse billetterie et un abonnement caché derrière la finale de la coupe de France de football : Lens-Nice.
Speaker Johnson has introduced a new fig leaf over the American surveillance state, the Foreign Intelligence Accountability Act. Introduced with only days to go before Section 702 of the Foreign Intelligence Surveillance Act (FISA) expires and the U.S. government loses one of its most invasive surve...
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious after an update. [...]
Relax, the data's been recovered. Continue with your vibe coding
A ruling could come this summer in Chatrie v. United States, which could have bigger ramifications about the scope of government surveillance.
The post Supreme Court justices skeptically question both sides in geofence surveillance case appeared first on CyberScoop.
The ShinyHunters extortion group is claiming responsibility for a breach of home and commercial security vendor ADT that exposed the data of 5.5 million customers. attack appears to be part of a larger and ongoing vishing campaign being run by the prolific threat actors.
The post ADT Breach Exposes...
Privacy advocates had worried that the high court would rule that geofencing does not qualify as a constitutionally protected search, opening the door to much broader use of warrantless reverse searches of all types.
Michał Majchrowicz discovered that Vim's zip plugin could overwrite
arbitrary files. An attacker could possibly use this issue to delete
sensitive data or execute arbitrary code. This issue only affected
Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-35177)
It was discovered that Vim's netbeans inter...
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect generation of cryptographic keys, denial of service, information disclosure, XEE/XEE attacks or incorrect validation of Kerberos credentials. For the stable distribution (trixie), these problems h...
State officials said they observed overseas criminals carrying out government impersonation or tech support cons, as well as romance and pig butchering scams using cryptocurrency ATMs.