> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Notably, the Dutch police have arrested two individuals linked to NFC relay attacks that drained over $400,000 from victims' bank accounts by tricking them into installing malicious apps. Additionally, a Quest Diagnostics breach has exposed sensitive patient records, prompting concerns about data security in healthcare. AI continues to pose challenges, with reports indicating that malicious downloads can deceive AI coding agents into executing harmful code, while advanced AI models are searching for ways to bypass restrictions. Furthermore, an ongoing campaign is exploiting stolen GitHub tokens to access private repository secrets, emphasizing the persistent risk of credential theft. Lastly, the emergence of synthetic identities has left U.S. lenders vulnerable to an estimated $2.4 billion in fraud.
|
// AI-powered summary generated at 12:01
L'Autorité norvégienne de protection des données a infligé une amende à la société de technologie publicitaire Xandr, filiale de Microsoft, pour des violations du RGPD liées au traitement de données provenant de l'application de rencontres Grindr.Suite à une plainte déposée en 2020 par l'association...
L'autorité italienne a rappelé qu'un contexte conflictuel préexistant avec une personne concernée ne dispense pas un responsable de traitement de son obligation de répondre formellement et dans les délais à une demande d'exercice de droits, notamment une demande d'accès.Faits et contexteL'autorité i...
Pew Research Center finds 51% of Americans say no, cite lack of interest - not know-how - as the top reason
L'autorité italienne sanctionne une société pour un affichage de vidéosurveillance incomplet, rappelant que l'identité du responsable du traitement et la durée de conservation sont des informations essentielles du premier niveau d'information.Faits et contexteL'autorité italienne de protection des d...
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. [...]
ESET Endpoint Security for Android 7.0 has been released and is available to download.
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize ha...
Windows 11 26H2 ajoute 32 paramètres de GPO : agents IA et MCP, blocage du NTLM, barre des tâches, BitLocker, Defender. Voici le récapitulatif complet.
Le post Windows 11 26H2 : quels sont les nouveaux paramètres de GPO ? a été publié sur IT-Connect.
Google Guest Agent and Google OS Config Agent could allow unintended access to network services.
It was discovered that the Go x/net/idna package, vendored in Google Guest
Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded
labels that decoded to ASCII-only labels when processing internationalized
domain names. A remote attacker could possibly use this issue to bypass
hostna...
Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. [...]
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it.
But speed is only part of the problem. A secure connection didn't always mean...
Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single target
Several security issues were fixed in libx11.
In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster.
Last week, the FBI arrested (alternate link) someone associated with that crime.
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a pr...
Logpush now supports Transformers, allowing teams to filter, redact, and reshape log streams using SQL before export. Powered by Apache DataFusion and Apache Arrow, Transformers apply those changes directly to log data before it reaches the destination.
The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.
The post IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion appeared first on SecurityWeek.
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities. [...]
Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]