[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A federal court in Brooklyn has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for using ransomware to extort millions of dollars...
> Victory! You Can Now Exclude Apps from Siri AI
In the most recent update to Apple’s devices, iOS 27.2, the company has introduced a new setting to “Exclude Apps” from Siri AI, fulfilling one of our asks from our Encrypt It Already campaign earlier this year. One of our main concerns with new AI features on devices is how those features interact...
> Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
> Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.
> Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns
> Court Should Curb Abuse of Grand Jury Subpoenas Targeting Social Media Users
A federal appeals court should curb the government’s abuse of grand jury subpoenas to unmask social media users who criticize lawless immigration enforcement. That is the message from the ACLU, EFF, and other civil liberties and trade groups who filed a friend-of-the-court brief in a sealed case in...
> Debian Firefox ESR Update Addresses Multiple Security Issues
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, privilege escalation, information disclosure or spoofing. For the stable distribution (trixie), these prob...
> Treasury Sanctions Russians, North Koreans supporting DPRK IT Worker Fraud
Summary OFAC sanctioned Russian and DPRK nationals that targeted U.S. businesses with fraudulent IT workers, generating cryptocurrency proceeds to fund
 The post Treasury Sanctions Russians, North Koreans supporting DPRK IT Worker Fraud appeared first on Chainalysis.
> Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Accord...
> Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’ appeared first on CyberScoop.
> The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Accord...
> Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]
> PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. The post PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Mo...
> UODO - autorité polonaise
La Cour administrative suprĂȘme de Pologne a confirmĂ© une sanction de l'autoritĂ© polonaise de protection des donnĂ©es (UODO), rappelant que si le consentement oral au traitement de donnĂ©es de santĂ© peut ĂȘtre valable, il incombe au responsable du traitement de dĂ©montrer, en vertu du principe de respons...
> PIPC - autorité sud-coréenne
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a annoncé la tenue d'une réunion de partage des résultats sur l'utilisation des informations pseudonymisées, destinée à soutenir les organismes dans leurs projets de recherche et de développement.Prévue pour le 28 octobre...
> Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO...
> UODO - autorité polonaise
L'AutoritĂ© polonaise de protection des donnĂ©es personnelles (UODO) annonce l'organisation d'un webinaire sur la protection des donnĂ©es des patients dans le secteur de la santĂ©.Ce sĂ©minaire en ligne, intitulĂ© "Protection des donnĂ©es personnelles dans les entitĂ©s mĂ©dicales – obligations des fournisseu...
> Datatilsynet - autorité norvégienne
L'autorité norvégienne de protection des données (Datatilsynet) alerte sur les risques liés à l'émergence d'agents d'intelligence artificielle autonomes et formule des recommandations pour leur gestion proactive par les entreprises.L'autorité souligne que l'intelligence artificielle évolue de simple...
> European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancers’ entire workday.
> GPDP - autorité italienne
Le Garant italien de la protection des données s'est exprimé lors d'une audition devant la XIVe Commission de la Chambre des députés au sujet de la proposition de rÚglement européen sur les enfants (EU Kids Act), soulignant la nécessité de concilier la protection des mineurs avec leur vie privée et...