> TODAY'S SUMMARY (75 articles)
Today's cyber news highlights several critical security threats and trends. Google now allows the use of Gmail data for targeted ads, raising privacy concerns among users. A critical vulnerability in Microsoft's .NET framework, dubbed Broccoli2Shell, has prompted emergency patching efforts. The PHP2Shell vulnerabilities are actively being exploited, with attackers successfully launching exploits against multiple hosts. Meanwhile, AI technologies are increasingly being leveraged for malicious activities, including a recent case in the Netherlands where AI-generated bank calls led to significant fraud losses. Additionally, the CISA has outlined an aggressive cyber defense strategy aimed at bolstering critical infrastructure resilience by 2030. As threats evolve, organizations must remain vigilant against both traditional and AI-assisted cyber attacks.
|
// AI-powered summary generated at 16:01
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
NudeLeaksTeens démantelé : plus de 17 000 victimes, trois sites fermés et deux frères interpellés en France.
A cyberattack overnight Sunday disrupted refrigerators at hundreds of French supermarkets, spoiling fresh food at stores run by some of the country’s largest grocery chains.
Le FBI évoque un correctif non installé après le piratage revendiqué par ShinyHunters.
ASOS signale un possible accès aux données clients après une notification pirate. ZATAZ analyse les revendications.
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can aut...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure  UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX – A malicious...
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. [...]
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands th...
This is not so much a full post as it is an advertisement. I’ve been working with Claude and GPT 6 Astra to conduct a survey of historical cryptanalysis results, in an effort to determine how many human-hours have been spent attempting to cryptanalyze the problems we use in public-key encryption sch...
DDoS et démocratie : ZATAZ analyse les risques pour le vote, les revendications de NoName et le commerce de DDoS des pirates de ON.
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude...
Infogreffe visé par une revendication de fuite : un pirate évoque des profils et des secrets techniques sensibles.
Reconnaissance faciale partielle : une enquête OSINT révèle les risques d'identification des militaires masqués.
Several vulnerabilities have been discovered in vips, a fast image processing library. These vulnerabilities could result in denial of service, memory safety issues, or other security impact when processing specially crafted image files or data. For the stable distribution (trixie), these problems h...
Meanwhile, AI agents move robotic arms, 'make OT device operator screens lie'
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is...
Australian Cyber Aware's September 2026 review highlights major cybersecurity, privacy, AI, fraud, governance, risk and compliance developments affecting Australian organisations. This edition covers significant data breaches, ransomware claims, regulatory enforcement actions, audit findings, emerg...
L'assureur péruvien Interseguro a été mentionné dans une alerte de cybersécurité émanant du groupe de ransomware Direwolf, qui prétend avoir accédé à 2,5 téraoctets de données. Interseguro a confirmé l'accès non autorisé à des informations d'un groupe de clients, incluant potentiellement des documen...