Une clinique a Ă©tĂ© sanctionnĂ©e pour avoir traitĂ© des donnĂ©es de patients sans base lĂ©gale et, de surcroĂźt, pour ne pas avoir coopĂ©rĂ© avec l'autoritĂ© de contrĂŽle lors de son enquĂȘte.Faits et contexteL'AutoritĂ© Nationale de Surveillance du Traitement des DonnĂ©es Ă CaractĂšre Personnel (ANSPDCP) a aujou...
Le Garant italien pour la protection des données personnelles est intervenu d'urgence pour ordonner à plusieurs médias de cesser le traitement des données d'un mineur de onze ans, dont les images et des informations personnelles avaient été diffusées suite à sa participation à des émeutes, rappelant...
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access.
"First identified in late 2023, Silent Train uses rotating chains of compromised SOHO...
Noyb alleges the platform in some cases records freelancersâ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancersâ entire workday.
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42.
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang.
GitHub announced a package firewall that checks npm packages against an enterpriseâs policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a lapt...
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background.
To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update...
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]
We explain how the weak keys came about, and which applications and IT systems in an organization should be checked for the vulnerability so the threat can be eliminated.
DÚs la mi-décembre 2026, Discord publiera sur le Web, notamment sur Google, des messages de ses serveurs publics. En France, l'option est désactivée par défaut.
Le post Discord : les messages des serveurs publics vont apparaßtre dans les moteurs de recherche a été publié sur IT-Connect.
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown.
Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the...
Introduction
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.
The activity, which was observed on October 25, 202...
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and modernizing defense to keep pace with AI-powered threats. Aarti Borkar shares how security leaders can approach both.
The post The CISOâs evolving role: P...
The China-linked threat group has used the âSilent Trainâ framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks.
The post Researchers uncover Volt Typhoonâs covert, ephemeral network appeared first on CyberScoop.
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack