> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
L'autorité polonaise de protection des données (UODO) a annoncé la tenue d'une permanence dans son point de consultation régional de Katowice.Le 16 octobre 2026, des experts de l'autorité seront présents au Bureau de la Voïvodie de Silésie à Katowice pour offrir une assistance gratuite aux citoyens....
L'Autorité polonaise de protection des données (UODO) a annoncé la tenue d'une conférence de formation les 27 et 28 octobre 2026, intitulée "Élève, données personnelles, technologie. Comment construire une école numériquement sûre et résiliente ?", pour inaugurer la XVIIe édition de son programme na...
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek.
Le Président de l'Autorité polonaise de protection des données personnelles (UODO) a alerté le ministre de l'Intérieur et de l'Administration sur la nécessité de réglementer l'accès de la Police aux systèmes de vidéosurveillance municipaux.L'autorité de contrôle a été informée que la Police proposai...
L'Inspection de la protection des données estonienne (AKI) a lancé une consultation publique concernant la mise à jour de son guide sur la publication des données relatives aux défauts de paiement.Le projet de guide vise à clarifier les droits et obligations liés à la publication et à l'utilisation...
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.
The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep...
L'autorité britannique a sanctionné le service de police métropolitain pour l'utilisation d'une plateforme tierce non approuvée par ses agents, soulignant que les mesures correctives prises a posteriori ne suffisent pas à écarter la nécessité d'une action réglementaire face à des défaillances de gou...
Le Comité européen de la protection des données (CEPD) a adopté une déclaration sur les enjeux de protection des données soulevés par l'utilisation des lunettes connectées.Cette prise de position initiale fournit des orientations préliminaires aux utilisateurs, fabricants et prestataires de services...
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek.
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une décision de clôture de l'injonction prononcée à l'encontre des sociétés GOOGLE LLC et GOOGLE IRELAND LIMITED, estimant que celles-ci se sont conformées aux exigences spécifiques de sa précédente délibération, notamment en...
La Commission européenne a publié les résultats d'une enquête Eurobaromètre sur l'utilisation croissante de l'intelligence artificielle et de la gestion algorithmique par les entreprises en Europe.Selon cette enquête, 42 % des petites et moyennes entreprises (PME) et des entreprises de taille interm...
Never making type errors does not mean never making errors
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.
The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface.
"A remote code execution (RCE)...
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric researchers detailed a new Android banking trojan called Hirudo that takes a genuinely different approach to defeating banking security....
In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can access. Scott explains why agent privilege creep differ...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The followin...
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following C...
Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much slower movement. Exposed industrial control systems rose about 4% in tw...
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The...
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The...