> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
L'association None of Your Business (noyb) a publié son rapport annuel pour 2025, qui détaille ses actions juridiques, ses travaux politiques et les décisions obtenues au cours de l'année.En 2025, l'organisation a initié les préparatifs pour son premier recours collectif visant l'agence de notation...
La Commission Nationale de la Protection des Données (CNPD) du Portugal a participé à un atelier européen portant sur les méthodologies d'évaluation d'impact des systèmes d'intelligence artificielle.La CNPD a pris part à la 24ème réunion des Autorités de Surveillance de la Protection des Données d'E...
Learn how SOC audits work, the difference between SOC 1 vs SOC 2 compliance, and what type you need.
Le Comité européen de la protection des données (CEPD) a publié une déclaration sur les défis que représentent les lunettes intelligentes pour la protection des données.Le CEPD a adopté cette déclaration lors de sa plénière, accompagnée d'un rapport intitulé "Le regard connecté. Enregistrement vidéo...
Une autorité publique ne peut se fonder sur une obligation légale de transparence pour publier des données personnelles si les actes concernés ne sont pas explicitement visés par la loi, un tel traitement étant alors dépourvu de base légale et justifiant l'exercice du droit à l'effacement.Faits et c...
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python clien...
Dans une décision sanctionnant deux sociétés pour un total de 155 000 €, l'Autorité hellénique de protection des données analyse en détail les manquements liés à l'utilisation secondaire d'images de vidéosurveillance à des fins judiciaires et à l'obstruction délibérée du droit d'accès d'une personne...
In an extremely disappointing ruling, a California trial court dismissed SIREN v. San Jose, our case challenging the city of San Jose’s warrantless searches of its vast stores of Automatic License Plate Reader (ALPR) data. EFF and the ACLU of Northern California represent SIREN and CAIR California,...
Anthropic took more than two months to alert cops
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek.
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.Â
The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek.
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials.
"Your configuration becomes vali...
Participants said it was the largest joint scam operation to date and the first focused on the region.
The post West African scammers targeted in joint international government-industry operation appeared first on CyberScoop.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.