> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare Developer platform.
L'Agence Espagnole de Protection des Données (AEPD) lance un appel à contributions pour le troisième numéro de sa revue scientifique, la Revue Confidentialité, Innovation et Technologie (PIT), consacré à l'interaction du RGPD avec d'autres réglementations.Ce numéro, dont la publication est prévue po...
L'Autorité polonaise de protection des données personnelles (UODO) a transmis au Ministre de l'Énergie ses observations sur un projet de modification du règlement relatif aux systèmes de mesure de la consommation d'énergie.L'Autorité a mis en évidence un risque de collecte excessive de données sur l...
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms:
Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughl...
L'autorité norvégienne de protection des données (Datatilsynet) a publié un rapport sur l'utilisation d'un assistant d'intelligence artificielle pour la rédaction de comptes rendus dans les services de protection de l'enfance.Ce rapport, issu d'un projet mené dans son "bac à sable" réglementaire ave...
Un ingénieur d’OpenAI aurait caché un micro dans la salle de réunion de la direction. Prompts, vidéosurveillance, second micro : ce que révèle la plainte.
Le post OpenAI : un ingénieur arrêté pour avoir caché un enregistreur dans la salle de réunion de la direction a été publié sur IT-Connect.
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an una...
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.
The hidden attack code ran the moment an ad loaded on t...
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enab...
Ce tutoriel explique comment analyser l'espace disque d'un NAS Synology avec QDirStat, l'Ă©quivalent de WinDirStat, pour identifier les fichiers volumineux.
Le post NAS Synology – Plus d’espace disque disponible, que faire ? a été publié sur IT-Connect.
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for authenticated attackers with subscriber-level access and above to store a malicious S...
Une faille critique de l'app Collabora Built-in CODE de Nextcloud sert à déposer des webshells. La désactiver ne suffit pas : voici comment vous protéger.
Le post Nextcloud : des serveurs piratés via une faille critique de l’application Collabora Built-in CODE a été publié sur IT-Connect.
Several security issues were fixed in the Linux kernel.
Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- S390 architecture;
- IIO ADC drivers;
- Multiple devices driver;
- PCI subsystem;
- VFIO drivers;
- Networ...
Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links Discover-Tech to Candiru, an Israeli spyware vendor that the US government placed on its Entity List in 2021. Candiru has since used the name Integr...
Learn how to write a resume with AI, protect your personal data, and improve your chances of catching a recruiter’s attention — with practical tips and a ready-made prompt.