[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Zero‑click Grafana AI attack can enable enterprise data exfiltration
Indirect prompt injection is possible on AI-powered dashboards, allowing exfiltration of sensitive enterprise data without user authentication. Security researchers are warning about a critical Grafana issue, dubbed GrafanaGhost, that allows attackers to leak sensitive data...
> Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurrency mining and proxy botnet. "A purpose-built Python scanner continuously sweeps major cloud IP ranges for vulnerable targets, automaticall...
> Axios compromis : une attaque discrète au cœur du code
Axios sur npm révèle une attaque supply chain où deux versions compromises ont diffusé un RAT sur Windows, macOS et Linux.
> [Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk
In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are maturing, yet the risk is actually increasing. According to new research from the Ponemon Institute, hundreds of applications within the typical enterprise rem...
> PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses
More power for bug hunters An education-first approach to bug bounty Rewards on Meta's Bug Bounty Platform Our shared vision Ready to get started? We’re excited to announce a new partnership with Meta
> Google dévoile Gemma 4, son nouveau modèle IA open source
Gemma 4, c'est le nom de la nouvelle famille de modèles IA dévoilée par Google. Sa particularité : elle est distribuée avec la licence open source Aparche 2.0. Le post Google dévoile Gemma 4, son nouveau modèle IA open source a été publié sur IT-Connect.
> Cyberattack hits Northern Ireland’s centralized school network, disrupting access for thousands
The Education Authority (EA), which oversees school support services in Northern Ireland, said in an official statement it became aware of the incident affecting the “C2K” system last week and took immediate steps to contain the breach.
> Talos Takes: 2025's ransomware trends and zombie vulnerabilities
In this episode of Talos Takes, Amy and Pierre Cadieux unpack the ransomware and vulnerability trends that defined 2025.
> Multi-Tenant SaaS and Single Sign-On (SSO)
Uncover the complexities of multi-tenant SaaS architecture, understand how SSO simplifies access management, and explore how to fortify security in these enviro The post Multi-Tenant SaaS and Single Sign-On (SSO) appeared first on Security Boulevard.
> UK exposes Russian military intelligence hijacking vulnerable routers for cyber attacks
New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.
> APT28 exploit routers to enable DNS hijacking operations
Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.
> Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI
Cryptocurrency scams alone cost victims over $7 billion, while AI-enabled fraud threats are on the rise, says FBI
> Traffic violation scams swap links for QR codes to steal your card details
Phishers are using QR codes on official-looking notices to level up their traffic and toll scams.
> AI-enabled device code phishing campaign exploits OAuth flow for account takeover
A phishing campaign that bypasses the standard 15-minute expiration window through automation and dynamic code generation, leveraging the OAuth Device Code Authentication flow to compromise organizational accounts at scale, has been observed by the Microsoft Defender Security Research team. The camp...
> InfoSec News Nuggets 04/07/2026
Microsoft links Medusa ransomware affiliate to zero-day attacks Microsoft says the China-based group it tracks as Storm-1175 is moving unusually fast in Medusa ransomware intrusions, sometimes weaponizing newly disclosed bugs within a day and in some cases exploiting flaws before patches are release...
> Microsoft déploie Windows 11 25H2 sur les PC avec Windows Famille et Pro
Microsoft vient d'annoncer le début du déploiement automatique de Windows 11 25H2 pour les ordinateurs sous les éditions Famille et Pro encore en 24H2. Le post Microsoft déploie Windows 11 25H2 sur les PC avec Windows Famille et Pro a été publié sur IT-Connect.
> GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack 
Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges. The post GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack  appeared first on SecurityWeek.
> The Hidden Cost of Recurring Credential Incidents
When talking about credential security, the focus usually lands on breach prevention. This makes sense when IBM’s 2025 Cost of a Data Breach Report puts the average cost of a breach at $4.4 million. Avoiding even one major incident is enough to justify most security investments, but that headline fi...
> GPUBreach exploit uses GPU memory bit-flips to achieve full system takeover
GPUBreach attack technique uses GPU memory bit-flips to escalate privileges and potentially take full control of a system. New research shows that attacks like GPUBreach exploit RowHammer bit-flips in GPU memory (GDDR6) to go beyond data corruption. Attackers can use this technique to escalate privi...
> Is Gmail Filtering Your Emails? Causes, Signs & Fixes
Find out why Gmail is filtering your emails, what triggers its spam filters, and how to fix it — including authentication, sender reputation, and content issues. The post Is Gmail Filtering Your Emails? Causes, Signs & Fixes appeared first on Security Boulevard.