> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre du ministère de l'Économie et des Finances, comprenant le prononcé d'une amende de 12 000 €, pour des manquements liés à la diffusion de données de candidats à un concours public et à une surveillanc...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'ORANGE ESPAGNE, S.A.U. (comprenant le prononcé d'une amende de 230 000 €) pour des manquements en lien avec la sécurité du traitement des données personnelles dans le cadre de la gestion des demandes...
Anthropic left details of an unreleased model, an invite-only CEO retreat, sitting in an unsecured data trove in a significant security lapse. Leaked reports suggest this next-generation model from Anthropic is a major advancement in reasoning, coding, and cyber offense. Its capabilities are signifi...
Le Délégué adjoint à la protection des données finlandais a statué sur les pratiques de la société d’information de crédit Dun&Bradstreet Finland relatives à l’exercice du droit d’accès.L'autorité a jugé non conforme la pratique de l'entreprise qui limitait la consultation gratuite des données d...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Dedalus Italia S.p.A., comprenant le prononcé d'une amende de 32 000 €, pour des manquements en lien avec la sécurité du traitement. Cette affaire débute par plusieurs notifications de violation d...
RSAC 2026 Conference marked a return to form, more vibrant and better attended than any show I can recall over the past decade. The audience was distinctly international, with strong representation from North America, Europe and Latin America, and it was refreshing to see the energy and overall vibe...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de GASEXPRESS PATRAIX, S.L. comprenant le prononcé d'une amende de 20 000 € pour des manquements en lien avec la sécurité des données personnelles traitées par ses distributeurs automatiques de carbura...
Iranian state-linked hackers published emails stolen from FBI Director Kash Patel’s personal account. The lesson for every security leader: no title protects you from an exposed digital footprint. On March 27, 2026, the Handala Hack Team, a group U.S. prosecutors have formally tied to Iran’s Ministr...
Agentic AI introduces new security risks. Learn how the OWASP Top 10 Risks for Agentic Applications maps to real mitigations in Microsoft Copilot Studio.
The post Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio appeared first on Microsoft Security Blog.
A new campaign has leveraged the ClickFix social engineering tactic as a way to distribute a previously undocumented malware loader referred to as DeepLoad.
"It likely uses AI-assisted obfuscation and process injection to evade static scanning, while credential theft starts immediately and captures...
Demands for Apple customer records by federal agents in recent months underscore the privacy limitations of email.
TeamPCP’s destructive run of supply chain breaches has stopped, for now: it has been three days since the group published malicious versions of Telnyx’s SDK on PyPI, and there haven’t been reports of new open-source project compromises. Partnership with emerging RaaS operation “The prior operational...
Explore a selection of the latest DFIR employment opportunities in this week’s Forensic Focus jobs round-up.
EFF Executive Director Cindy Cohn will be on The Daily Show tonight, Monday March 30, at 11 pm ET and PT, speaking with host Jon Stewart. Cindy will discuss her long history of fighting for privacy online and her new book, Privacy’s Defender: My Thirty-Year Fight Against Digital Surveillance (MIT Pr...
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
The post Passkeys Hit Critical Mass: Microsoft Auto-Enables for Millions, 87% of Companies Deploy as Passwords Near End-of-Life appeared first on Securi...
It was discovered that PyJWT did not validate the critical header
parameter, contrary to the RFC specification expectations. A remote
attacker could possibly use this issue to bypass certain authentication
checks and restrictions.
TL;DR Low-cost, commercially available drones have become central to modern conflict, allowing state and non-state actors, such as pro-Russia militias…
The post From the Battlefield to the Blockchain: How Cryptocurrency Is Helping Finance the Drone Revolution appeared first on Chainalysis.
Author, Creator & Presenter: Santiago Gimenez Ocano & Ryan Syed Security Engineers At Praetorian
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025 – Star...
Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams
This is the fourth update to the TeamPCP supply chain campaign threat intelligence report,&#;x26;#;xc2;&#;x26;#;xa0;"When the Security Scanner Became the Weapon"&#;x26;#;xc2;&#;x26;#;xa0;(v3.0, March 25, 2026). Update 003 covered developments through March 28, including the first 48-...