> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Cybercriminals are increasingly targeting everyday users with spyware, indicating a shift towards more indiscriminate attacks. Additionally, vulnerabilities in widely used platforms like SAP and Google Chrome have been actively exploited, with SAP releasing critical patches for multiple flaws. The Russian state-linked Turla group continues to pose a threat, using advanced tools like "Cereal" to intercept emails from government servers. Meanwhile, supply chain attacks remain a concern, evidenced by the recent Qubole incident, which compromised numerous organizations' credentials. Overall, the rise in cloud vulnerabilities and the exploitation of AI in cyberattacks are emerging as critical areas for organizations to address.
|
// AI-powered summary generated at 16:00
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de la société EUROPEAN ENERGY TRADE S.L. (EET), comprenant le prononcé d'une amende de 600 €, pour des manquements liés à l'obstruction de ses pouvoirs d'enquête. Cette affaire débute par une plainte d...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de RESIDENCIAL ETXE-LAN, S.L. (comprenant le prononcé d'une amende de 3 000 €) pour des manquements en lien avec son obligation de coopération avec l'autorité de contrôle. Cette affaire débute par une...
What is Mythos
Mythos is Anthropic’s latest AI model, and it is stirring up a tornado of concern in cybersecurity circles. Even before its release, Mythos discovered thousands of new sensitive vulnerabilities in commercial and open-source software, including all major operating systems and web br...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de SIPHONE 2020, S.L. (comprenant le prononcé d'une amende de 4 000 €) pour des manquements en lien avec son système de vidéosurveillance. Cette affaire débute par une plainte déposée le 22 mai 2025, s...
L'Autorité nationale pour la protection des données et la liberté d'information (NAIH) a publié un communiqué concernant une violation de données massive subie par la société Mediaworks Hungary Zrt., annonçant l'ouverture d'une enquête d'office. Cette affaire débute par des informations parues dans...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Centimeter Wavelengths’ appeared first on Security Boulevard.
La Cour administrative suprême de Finlande a publié une décision confirmant la légalité du traitement de données relatives à l'appartenance religieuse, lorsque cette information pouvait être déduite d'une enveloppe envoyée dans le cadre d'élections paroissiales. Cette affaire débute par une plainte...
Orphaned applications are a significant driver of shadow IT and a major headache for asset and identity management. We all know the drill: an account should have been deprovisioned years ago, but somehow fell through the cracks. Now, the application is just… sitting there, sti...
The preliminary settlement agreement, released on Thursday, said that Forbes has agreed to give users “greater notice” of its use of trackers and will add language to its website providing California residents with more control over how their data is collected and shared with third parties.
Understand the difference between AI security and AI governance and why both fail without identity and SaaS control.
The post AI Security vs AI Governance Explained appeared first on Security Boulevard.
Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could result in an authentication bypass.
MOVEit Automation (formerly Central) is a secure, server-based managed file transfer (MFT) solution used to schedule and automate file mo...
Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository. [...]
Learn why SaaS identity, not the network, is now the true security perimeter in AI-driven environments.
The post SaaS Identity Is the New Security Perimeter appeared first on Security Boulevard.
How a new class of AI-powered attacks is redrawing the rules of cybersecurity, and why the organizations that survive will be those that build for containment, not just prevention. There is a moment in every technological shift when the future stops being theoretical and starts breaking things. For...
The woman’s lawyer told CyberScoop they believe the company edited her video to suggest she was a “friend with benefits” and intentionally geofenced it to men around her.
The post A college student is suing a dating app that allegedly used her TikTok videos to target men in her dormitory appeared f...
Defacement visant Warner Bros France : sous-domaines, Magento, fichiers publics et risques cyber à vérifier.
New httpd packages are available for Slackware 15.0 and -current to fix security issues.
Digital Fairness in the EU
The next few years will be decisive for EU digital policymaking. With major laws like the Digital Services Act, the Digital Markets Act, and the AI Act now in place, the EU is entering an enforcement era that will show whether these rules are rights-respecting or drift tow...
Mediaworks confirmed the incident on Friday, warning that “a significant amount of illegally obtained data may have come into the possession of unauthorized persons."
Hasbro signale un accès réseau non autorisé avec des enjeux cyber et de continuité sans pour le moment parler de fuite de données.