[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> U.S. CISA adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Wing FTP Server flaw, tracked as CVE-2025-47813 (CVSS score of 4.3), to its Known E...
> USN-8100-1: Linux kernel (NVIDIA) vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), loca...
> Pokémon Go players helped train robots to navigate cities
Images captured by Pokémon Go players are now helping train AI systems that allow delivery robots to navigate cities with centimeter-level accuracy.
> CrowdStrike Extends Agentic AI Alliance with NVIDIA
CrowdStrike today revealed it is adding additional artificial intelligence (AI) agents into its managed detection and response (MDR) services using a toolkit provided by NVIDIA. At the same time, CrowdStrike also announced that a Secure-by-Design AI Blueprint built in collaboration with NVIDIA will...
> Ubuntu 24.04 LTS USN-8095-2 Linux Kernel Critical Local Escalation
Several security issues were fixed in the Linux kernel.
> Ubuntu 22.04 LTS Advisory USN-8096-2 Linux Kernel FIPS Security
Several security issues were fixed in the Linux kernel.
> Russia-linked APT uses DRILLAPP backdoor to spy on Ukrainian targets
Russia-linked threat actors target Ukrainian entities with DRILLAPP backdoor and use Edge debugging for stealth. A new DRILLAPP backdoor campaign targets Ukrainian organizations, abusing Microsoft Edge debugging to evade detection. Observed in February 2026, it shows links to previous Russian-aligne...
> Decentralized Identity and Verifiable Credentials: The Enterprise Playbook 2026
The decentralized identity market hits $7.4B in 2026. Every EU member state must deploy a digital identity wallet by year-end. This enterprise playbook covers how verifiable credentials, DIDs, ZKPs, and the EUDI Wallet work — and how to build a practical adoption roadmap. The post Decentralized Iden...
> Ubuntu 24.04 22.04 Linux Kernel NVIDIA Critical Privilege Escalation
Several security issues were fixed in the Linux kernel.
> Big Tech Unites: Industry Giants Sign Global Accord to Combat AI-Driven Scams
In a rare display of unified defense, eight of the world’s most powerful technology firms have signed a landmark pact to disrupt the global scam networks currently siphoning billions of dollars from consumers. The Online Services Accord Against Scams signed by Google, Amazon.com Inc., Microsoft Cor...
> Robotics surgical biz Intuitive discloses phishing attack
Operations and hospital networks not affected, we're told Robotics-assisted surgical tech firm Intuitive said that unauthorized intruders gained access to some of its internal IT business applications after stealing an employee's credentials during a phishing attack.…
> Augustus v0.0.9: Multi-Turn Attacks for LLMs That Fight Back
Single-turn jailbreaks are getting caught. Guardrails have matured. The easy wins — “ignore previous instructions,” base64-encoded payloads, DAN prompts — trigger refusals on most production models within milliseconds. But real attackers don’t give up after one message. They have conversations. Augu...
> GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundreds of Python repositories. "The attack targets Python projects — including Django apps, ML research code, Streamlit dashboards, and PyPI packages — by appending...
> Blocking the Internet Archive Won’t Stop AI, But It Will Erase the Web’s Historical Record
Imagine a newspaper publisher announcing it will no longer allow libraries to keep copies of its paper.  That’s effectively what’s begun happening online in the last few months. The Internet Archive—the world’s largest digital library—has preserved newspapers since it went online in the mid-1990s. T...
> Stryker attack wiped tens of thousands of devices, no malware needed
Last week's cyberattack on medical technology giant Stryker was limited to its internal Microsoft environment and remotely wiped tens of thousands of employee devices. [...]
> Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization
The evolution of Iranian cyber operations in broad context: from custom wiper malware to misuse of legitimate admin tools and more. The post Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization appeared first on Unit 42.
> Standing up for the open Internet: why we appealed Italy’s "Piracy Shield" fine
Cloudflare is appealing a €14 million fine from Italian regulators over "Piracy Shield," a system that forces providers to block content without oversight. We are challenging this framework to protect the Internet from disproportionate overblocking and lack of due process.
> BSidesCache 2025 – How To Infosec Conference
Author, Creator & Presenter: Bryson Loughmiller -- Founder, [Petracore](https://petracore.io) ________________________________________________________________ Our thanks to BSidesCache for publishing their Creators, Authors and Presenter’s outstanding BSidesCache 2025 content on the Organization...
> Cybercrime has skyrocketed 245% since the start of the Iran war
Hacktivists use proxy services from Russia, China for 'billions of designed-for-abuse connection attempts' Cybercrime has skyrocketed since the start of the Iran war, according to Akamai, which reports a 245 percent increase in everything from credential harvesting attempts to automated reconnaissan...
> UODO - autorité polonaise
L'Office polonais de protection des données personnelles (UODO) a publié une décision de sanction à l'encontre de la société Restaurant Partner Polska, qui exploite la plateforme Glovo, comprenant le prononcé d'une amende de 5 898 064 PLN (environ 1 371 875 €) pour des manquements en lien avec la co...