> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A new free vulnerability database for maritime systems has been launched, indexing nearly 30,000 vulnerabilities, highlighting ongoing concerns in the maritime sector. In Ukraine, attackers exploited weaknesses in Dahua IP cameras, emphasizing the risks associated with remote surveillance systems. A significant vulnerability in Microsoft Authenticator for Android has been identified, allowing rogue apps to hijack work accounts. Rapid7's report indicates that 71% of vulnerability exploits occur within a week of disclosure, stressing the urgency for organizations to patch flaws quickly. Additionally, the University of New Mexico Health System faced a major cyber incident that forced patient diversions and clinic closures, underscoring the real-world impact of cyber threats.
|
// AI-powered summary generated at 08:00
Nicholas H. Safford & Co., Inc. experienced a security incident where unauthorized access occurred between January 30, 2026, and March 12, 2026. The incident may have exposed personal information, including names, dates of birth, social security numbers, and account numbers. The company has taken st...
Othon, Inc. suffered a data breach where certain files within its network were accessed and/or downloaded without authorization, potentially exposing name, Social Security Number, driver’s license number, and/or financial account information.
Threat actors are still having success tricking human resources staff into opening malware-infected phishing emails.
The latest example is detailed by researchers at Aryaka, who this week described a campaign by an unnamed threat actor who is distributing resumés containing...
La ville de Herne a décidé de désactiver préventivement certaines de ses systèmes informatiques, ce qui a entraîné des restrictions au service aux citoyens. Bien que l'article évoque la possibilité d'une cyberattaque, aucune confirmation définitive n'est encore apportée sur l'origine de l'incident....
La chaîne de restaurants américaine Duffy's Sports Grill a subi des perturbations majeures de ses systèmes de paiement et de son programme de fidélité en mars 2026, un incident lié à une attaque présumée du ransomware Qilin. Bien que la société n'ait pas confirmé publiquement la nature de l'attaque,...
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that an authentication bypass vulnerability patched in Ivanti Endpoint Manager (EPM) last month is now being exploited in the wild. The agency has also updated its directive related to two Cisco Catalyst...
Hanover County Public Schools (HCPS) a signalé une interruption des services Internet et de plusieurs systèmes internes suite à une possible incident de cybersécurité. Bien que les Chromebooks des élèves ne semblent pas directement touchés, l'école a décidé de les désactiver temporairement par mesur...
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment strategies that drove eBay's 102% adoption increase and HubSpot's 4x faster logins.
The post Passkeys at Scale: The Complete Enterprise Deployment Playb...
(Note: This post is also cross-posted on the Let's Encrypt blog)
As announced earlier this year, Let's Encrypt now issues IP address and six-day certificates to the general public. The Certbot team here at the Electronic Frontier Foundation has been working on two improvements to support these featu...
Several security vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework. It was found that Netty was vulnerable to the MadeYouReset DDoS attack, a logical vulnerability in the HTTP/2 protocol itself and programming errors which enabled request smuggling attacks. Add...
State news published a list of nearly 30 sites that could be targeted Iran has reportedly designated Amazon, Google, IBM, Microsoft, Nvidia, Oracle, and Palantir facilities as legitimate targets of retaliatory strikes, according to an Al Jazeera report citing Iran’s state-affiliated Tasnim news agen...
New libxml2 packages are available for Slackware 15.0 and -current to fix security issues.
New libarchive packages are available for Slackware 15.0 and -current to fix security issues.
CVE-2026-23813 : cette faille de sécurité critique découverte dans le système AOS-CX d'Aruba Networking permet de réinitialiser le mot de passe admin.
Le post Accès admin ouvert à tous ? HPE alerte sur cette faille dans Aruba AOS-CX a été publié sur IT-Connect.
How Can Non-Human Identities (NHIs) Foster Stable and Secure Cloud Environments? Are your cloud environments as secure as they should be, or are unseen vulnerabilities putting your organization at risk? Where digital threats are more sophisticated than ever, managing Non-Human Identities (NHIs) and...
How Can DevOps Teams Enhance Security with Automated Configurations? What are some of the biggest security challenges facing DevOps teams? When organizations shift towards cloud-native environments, the role of machine identities, particularly Non-Human Identities (NHIs), becomes increasingly critic...
The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and FlexibleFerret through fake coding assessments. The malware then steals API tokens, cloud credentials, crypto...
Are You Confident in Your Enterprise’s Secrets Vaulting Strategy? Emerging threats and cybersecurity challenges have spurred organizations to reconsider their approach to managing machine identities, especially those categorized where Non-Human Identities (NHIs). By examining the lifecycle managemen...
A newly disclosed critical vulnerability in the widely used pac4j authentication framework is drawing attention across the open source community. Tracked as CVE-2026-29000, the flaw affects the pac4j-jwt library, which is commonly pulled in as a dependency by many popular Java authentication s...
Meanwhile, Verifone says 'no evidence' to support the digital intruders' claims A hacking crew with ties to Iran's intelligence agency claimed to be behind a global network outage at med-tech firm Stryker on Wednesday, and said the cyberattack was in response to the US-Israel airstrikes.…