> TODAY'S SUMMARY (7 articles)
Today's cyber news highlights several key threats and trends. Hackers are increasingly targeting AI systems, as demonstrated by a recent incident where credentials were stolen, leading to $740,000 in unauthorized compute usage for a cloud provider. Microsoft researchers revealed vulnerabilities in AI models, showing that attackers can create backdoors by manipulating just a few neurons. Additionally, recent updates for Slackware address critical security issues, including remote code execution and memory errors in their httpd and Git packages. The ongoing risk of vehicle hacking is underscored by a podcast discussing how attackers can gain control over car systems. As cyber threats evolve, organizations must prioritize robust security measures against these emerging vulnerabilities.
|
// AI-powered summary generated at 04:00
Apple announcement:
…iPhone and iPad are the first and only consumer devices in compliance with the information assurance requirements of NATO nations. This enables iPhone and iPad to be used with classified information up to the NATO restricted level without requiring special software or settings—a...
The number of FBI searches of data collected through the surveillance program known as Section 702 of the Foreign Intelligence Surveillance Act (FISA) between December 2024 to November 2025 rose to 7,413 from 5,518 the previous year.
IO River this week revealed it is leveraging the portable WebAssembly (Wasm) binary instruction format to make it possible to deploy any web application firewall (WAF) on a content delivery network (CDN). Starting with running the Check Point WAF on the Akamai CDN service, the overall goal is to el...
It was discovered that the parse_options_header() function of multipart, a Python multipart/form-data parser was susceptible to denial of service via malformed request headers or multipart/form-data streams. For the stable distribution (trixie), this problem has been fixed in version 1.2.1-2+deb13u1...
When Rep. Leigh Finke spoke last month before the Minnesota House Commerce Finance and Policy Committee to testify against HF1434, a broad-sweeping proposal to age-gate the internet, she began with something disarming: agreement.
“I want to support the basic part of this,” she said, the shared goal...
A major cyberattack on US medical supplies giant Stryker has resulted in thousands of devices being remotely wiped, after a pro-Iranian hacking group may have compromised the company’s Microsoft Intune management system.
Details remain sketchy, but what appears to have happ...
Presenter: Kausalya Ganesh, Cisco Systems, Inc
Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) (USENIX '25 content on the Organizations' YouTube Channel.
Permalink
The post USENIX Sec...
As enterprises race to embed AI agents into everyday workflows, a new and still poorly understood threat is moving from research papers into production risk: indirect prompt injection. In this conversation, Amit Chita, field CTO at Mend.io, explains why organizations building AI-powered application...
Several security issues were fixed in Go Networking.
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 12 mars 2026.
Partie I (avec débats): :
* Examen d’un projet de délibération portant avis sur un projet d’arrêté modifiant l’arrêté du 26 octobre 2010 relatif au fichier na...
If you're in the middle of applying for a planning or zoning permit, there is some unwelcome news: cyber-criminals have found a way to exploit the bureaucratic tedium of the process against you.
Read more in my article on the Fortra blog.
USN-8090-1 fixed vulnerabilities in OpenSSH. This update provides the
corresponding updates for Ubuntu 20.04 LTS.
Original advisory details:
Jeremy Brown discovered that the OpenSSH GSSAPI Key Exchange incorrectly
handled disconnecting clients. In non-default configurations where the
GSSAPIKeyExch...
L'autorité italienne de protection des données personnelles (GPDP) a publié une décision de sanction à l'encontre d'Intesa Sanpaolo Spa, comprenant le prononcé d'une amende de 17 628 000 €, pour des manquements liés au traitement illicite des données de 2,4 millions de clients transférés unilatérale...
L'Autorité de protection des données (APD) a publié une décision prononçant une réprimande à l'encontre de la commune de Dilbeek pour des manquements liés à la mise en place d’un système de caméras de reconnaissance de plaques d’immatriculation dans le cadre d’un projet de gestion du trafic. Cette a...
Jeremy Brown discovered that the OpenSSH GSSAPI Key Exchange incorrectly
handled disconnecting clients. In non-default configurations where the
GSSAPIKeyExchange setting is enabled, a remote attacker could use this
issue to cause OpenSSH to crash, resulting in a denial of service, or
possibly execut...
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) a émis un avertissement à l'encontre de la société ARRISE LIVE SRL pour un projet de traitement de données biométriques jugé non conforme. Cette affaire a pour origine des signalements concernant l'intenti...
L'Autorité polonaise de protection des données (UODO) annonce la tenue, les 24 et 25 mars 2026, de la troisième édition d'une conférence dédiée à l'Espace européen des données de santé (EHDS), en partenariat avec la Faculté de droit et d'administration, la Faculté de médecine de l'Université de Vars...
Find out about the data breach risks that UK businesses face and the best practices you need to implement to ensure business continuity.
Le Comité européen de la protection des données (EDPB) et le Contrôleur européen de la protection des données (EDPS) ont émis un avis conjoint sur une proposition de réglementation européenne relative aux biotechnologies, demandant des garanties spécifiques pour les données de santé.Les deux autorit...
Le Comité européen de la protection des données (CEPD) et le Contrôleur européen de la protection des données (CEPD) ont adopté un avis conjoint sur la proposition de la Commission européenne relative à une législation sur les biotechnologies, soutenant l'harmonisation des essais cliniques tout en e...