[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> French Senate passes bill that would ban children under 15 from social media
If the French effort becomes law, it would make France the first European country to follow Australia’s lead by banning social media for young teenagers.
> From vulnerability to resilience: an incident response framework for SMBs
Learn how SMBs can reduce vulnerabilities with a clear incident response plan to detect, contain, and recover from cyber threats.
> Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web
An exposed Amazon-hosted server allowed anyone to access reams of customer data without needing a password.
> Akira ransomware group can achieve initial access to data encryption in less than an hour
A new report from Halcyon finds that the group also puts more effort than usual into developing working decryptors, likely to incentivize businesses to pay up.  The post Akira ransomware group can achieve initial access to data encryption in less than an hour appeared first on CyberScoop.
> Avec Ubuntu 26.04, la configuration minimale pour la RAM évolue !
La nouvelle version d'Ubuntu, à savoir 26.04 LTS, est accompagnée par un changement au niveau de la configuration minimale : 6 Go au lieu de 4 Go. Le post Avec Ubuntu 26.04, la configuration minimale pour la RAM évolue ! a été publié sur IT-Connect.
> Apple Rolls Out DarkSword Exploit Protection to More Devices
The DarkSword exploit kit has been used by both state-sponsored hackers and commercial spyware vendors. The post Apple Rolls Out DarkSword Exploit Protection to More Devices appeared first on SecurityWeek.
> Lawmakers renew push for Labor Department-backed cyber apprenticeship grants
The bipartisan, bicameral Cyber Ready Workforce Act aims to cut into the country’s deficit of cybersecurity professionals. The post Lawmakers renew push for Labor Department-backed cyber apprenticeship grants appeared first on CyberScoop.
> Threat actor abuse of AI accelerates from tool to cyberattack surface
Generative AI is upgrading cyberattacks, from 450% higher phishing click‑through rates to industrialized MFA bypass. The post Threat actor abuse of AI accelerates from tool to cyberattack surface appeared first on Microsoft Security Blog.
> Google Workspace’s continuous approach to mitigating indirect prompt injections
Posted by Adam Gavish, Google GenAI Security TeamIndirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This technique enables the attacker to influence the behavior of an LLM by injecting mal...
> How Do I Make Kubernetes Self‑Service Without Losing Control?
Platform teams are under pressure to move faster, but handing full Kubernetes access to every developer is risky. Self‑service and control are not opposites; they are two sides of a well‑designed platform. The post How Do I Make Kubernetes Self‑Service Without Losing Control? appeared first on...
> How a password manager supports GDPR compliance for businesses
Discover how password management simplifies GDPR compliance, enhances access control, and supports security and accountability.
> Ubuntu 25.10 USN 8149-1 Linux Kernel Critical Risks Network Control
Several security issues were fixed in the Linux kernel.
> Ubuntu 24.04 LTS Linux Kernel Security Notice 8148-1 CVE-2026-23060
Several security issues were fixed in the Linux kernel.
> Emulating the Concealed Sinobi Ransomware
AttackIQ has released a new attack graph that emulates the behaviors of Sinobi ransomware, a ransomware strain that has been active since mid 2025. Sinobi is suspected to be a rebrand of Lynx, a Ransomware-as-a-Service (RaaS) group that first emerged in 2024. The post Emulating the Concealed Sinobi...
> ICE says it bought Paragon’s spyware to use in drug trafficking cases
The acting director of U.S. Immigration and Customs Enforcement told lawmakers that the use of Paragon spyware is necessary to counter terrorists’ “thriving exploitation of encrypted communications platforms.”
> How Treating AI Agents as Identities Can Reduce Enterprise AI Risk
AI agents are no longer experimental. They’re running production workloads, calling APIs, querying databases, provisioning infrastructure, and making decisions across cloud environments. Ironically these agents often end up with more access than the developers who built them. They operate with real...
> Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments
Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting environments. This post examines how this tradecraft conceals execution behind specially crafted HTTP cookies. The post Cookie-controlled PHP webshells: A stealthy tradecraf...
> Proactive Threat Hunting
A proactive threat hunting platform enables organizations to actively search for hidden threats within their environment before they can cause damage. Unlike traditional security tools that rely on alerts and predefined rules, threat hunting focuses on uncovering suspicious behaviors, anomalies, and...
> Residential proxies evaded IP reputation checks in 78% of 4B sessions
Researchers warn that residential proxies used to route malicious traffic are a big problem for IP reputation systems, as there is no clear distinction between attackers and legitimate users. [...]
> Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully exploited, could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system with elevated privileges. The vulnerability, tracked as...