> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
SmugMug is a family-owned photo hosting and e-commerce platform that helps professional photographers run their businesses online. Founded in 2002, the company provides tools for photographers to show their work, deliver client galleries, sell prints, and manage payments.Â
In 2018, SmugMug purchased...
Several security issues were fixed in OpenStack Glance.
Le Comité européen de la protection des données (CEPD) a publié un communiqué à l'occasion du dixième anniversaire de l'adoption du RGPD.Ce dernier est présenté comme le premier cadre complet de protection des données à l'échelle d'un continent, établissant des droits pour les personnes et des oblig...
La Commission Nationale de l'Informatique et des Libertés (CNIL) recommande l'élaboration d'un rapport d'activité par le délégué à la protection des données et propose un modèle pour faciliter sa rédaction.Bien que sa rédaction ne soit pas une obligation, ce rapport est présenté comme une bonne prat...
authd could be made to escalate privileges.
L'autorité italienne de protection des données a publié une décision de sanction à l'encontre du barreau de Plaisance, comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec la publication en ligne de données relatives à une sanction disciplinaire. Cette affaire débute par...
Xu Zewei is accused of participating in a Chinese government hacking group that broke into thousands of U.S. organizations and stole COVID-19-related research.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Landscape Features’ appeared first on Security Boulevard.
Sens. Maggie Hassan and Jim Banks wrote to Navigate360 after a hacker claimed to compromise the school safety tool.
The post Senators seek answers about hackers obtaining sensitive student data from ostensibly anonymous tip line appeared first on CyberScoop.
The U.S. Federal Trade Commission (FTC) warned of a massive increase in losses from social media scams since 2020, exceeding $2.1 billion in 2025. [...]
Explore a selection of the latest DFIR employment opportunities in this week’s Forensic Focus jobs round-up.
New mpg123 packages are available for Slackware 15.0 and -current to fix security issues.
For more than a decade, cybersecurity has sold one product under a thousand names: visibility. SIEM for events. EDR for endpoints. ASM for the attack surface. CNAPP for the cloud. Exposure management for everything else. Every category promised the same thing: if we could just see enough, we would f...
New waves of attacks on Apple users are leading to stolen cryptocurrency: fake crypto wallets in the App Store, trojanized legitimate macOS crypto apps, and other threats. Here’s how to stay protected.
Financial services cybersecurity in Michigan does not all look the same. The CISOs in this feature are securing a wealth management firm, a specialty insurance group, a farm credit institution, a community bank, a credit union serving a major university’s community, and another credit union with a d...
Understanding what AWS Identity and Access Management (IAM) policies can control helps you build better security controls and avoid spending time on approaches that won’t work. You’ve likely encountered questions like: Can I use AWS Organizations service control policies (SCPs) to prevent the creati...
sync.blue simplifie la synchronisation des contacts entre diverses sources, dont Microsoft 365, Google, les CRM, etc... et les appareils des utilisateurs.
Le post sync.blue® : le hub central pour la synchronisation de contacts en entreprise a été publié sur IT-Connect.
It was discovered that authd incorrectly assigned the primary group ID to
users under certain conditions. A local attacker could possibly use this
issue to achieve privilege escalation, or gain unauthorized access to files
belonging to other users.
The operation, identified by the Digital Forensic Research Lab (DFRLab), was part of Spamouflage, a long-running influence network linked to Beijing.
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive developer data and cryptocurrency wallets. [...]