> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The U.S. CISA has added significant flaws in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities catalog, indicating active exploitation. Meanwhile, the PHP web programming language faced severe vulnerabilities, termed "PHP-ocalypse," which were exacerbated by AI-assisted discovery and exploitation. Additionally, a new UEFI bootkit, BlackX, has been reported to bypass Secure Boot, while a memory-corruption flaw in Google's Brotli decoder affects multiple widely-used software packages. Notably, Capcom experienced a data breach exposing 11.7 million email addresses, emphasizing the ongoing risks to personal data. As AI technologies evolve, their role in enhancing both vulnerability detection and exploitation remains a growing concern.
|
// AI-powered summary generated at 20:00
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only a...
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The U.K.’s communications regulator fined the porn company 8579 LLC £1.35 million ($1.82 million) for not verifying user ages.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Session 13B: API Security
Authors, Creators & Presenters: Miaoqian Lin (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Kai Chen (Institute of Information Engineering, Chinese Academy...
USN-8051-1 fixed vulnerabilities in libssh. This update provides the
corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.
Original advisory details:
It was discovered that libssh clients incorrectly handled the key exchange
process. A remote attacker could possibly...
Not the first of its kind ai-pocalypse Anthropic sent the infosec community into a tizzy on Friday when it rolled out Claude Code Security, a new feature that scans codebases for vulnerabilities and suggests patches to fix the issues.…
The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a new campaign targeting specific entities in Western and Central Europe.
The activity, per S2 Grupo's LAB52 threat intelligence team, was active between September 2025 and January 2026. It has been codenamed Oper...
Microsoft is investigating a known issue that causes the mouse pointer to disappear in the classic Outlook desktop email client for some users. [...]
While some cities are moving to end their contracts with Flock over its links to ICE, others are taking matters into their own hands.
L'autorité norvégienne de protection des données (Datatilsynet) s'est jointe à soixante autres autorités mondiales pour publier une déclaration commune sur les systèmes d'intelligence artificielle (IA) générant des hypertrucages.Cette initiative fait suite aux préoccupations concernant des outils d'...
L'autorité polonaise de protection des données (UODO) a publié une décision de sanction à l'encontre de DPD Polska sp. z o.o., comprenant le prononcé d'une amende de 11 460 000 PLN (environ 2 677 570 €), pour des manquements en lien avec la gestion de ses sous-traitants et l'habilitation de ses empl...
A wormable cryptojacking campaign spreads via pirated software, using BYOVD and a time-based logic bomb to deploy a custom XMRig miner. Researchers uncovered a wormable cryptojacking campaign that spreads through pirated software bundles to deploy a custom XMRig miner. The attack uses a BYOVD exploi...
Le Comité Européen de la Protection des Données (CEPD) a signé une déclaration commune concernant les risques liés à l'imagerie générée par l'intelligence artificielle pour la protection de la vie privée.Cette déclaration, signée par la présidente du CEPD au nom de l'organisation le 23 février 2026,...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de ***EMPRESA.1 (comprenant le prononcé d'une amende de 25 000 €) pour des manquements en lien avec l'encadrement contractuel de la sous-traitance. Cette affaire débute par une plainte déposée le 28 ju...
New York-based ad tech company Optimizely has notified an undisclosed number of customers of a data breach after threat actors compromised some of its systems in a voice phishing attack. [...]
L'Autorité de protection des données italienne a publié une décision de sanction à l'encontre de la Province de la Congrégation des Frères des Écoles Chrétiennes (comprenant le prononcé d'une amende de 12 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance au sei...