> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
And they abused a Mandiant-developed open source tool in the attacks ShinyHunters told The Register that it has stolen data from about 100 high-profile companies in its latest Salesforce customer data heist, including Salesforce itself.…
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Depurazione Acqua S.r.l. (comprenant le prononcé d'une amende de 15 000 €) pour des manquements en lien avec des activités de démarchage téléphonique et la gestion de ses partenaires commerciaux....
L'Autorité de protection des données néerlandaise (AP) a conclu, suite à une enquête, que la base juridique des activités de collecte de données de l'Équipe de renseignement sur l'ordre public (TOOI) de la police est insuffisante.L'enquête révèle que le TOOI, chargé d'anticiper les troubles graves à ...
Organizations may be increasingly adopting Identity Threat Detection and Response (ITDR) practices, but a critical gap in disaster recovery readiness is leaving many vulnerable to catastrophic failure. The annual State of ITDR survey from Quest Software, which gathered insights from 650 IT and secu...
The post Beyond Prompt Injection: The Hidden AI Security Threats in Machine Learning Platforms appeared first on Praetorian.
The post Beyond Prompt Injection: The Hidden AI Security Threats in Machine Learning Platforms appeared first on Security Boulevard.
OpenAI are acquiring Promptfoo, an AI security platform that helps enterprises identify and remediate vulnerabilities in AI systems during development. Once the acquisition is finalized, OpenAI will integrate Promptfoo’s technology directly into OpenAI Frontier, their platform for building and opera...
The Cybersecurity and Infrastructure Security Agency and the MITRE Corporation have renegotiated the contract supporting the 26-year-old Common Vulnerabilities and Exposures Program in a way that eliminates the looming expiration that triggered panic across the security commun...
This deal underscores how frontier labs are scrambling to prove their technology can be used safely in critical business operations.
Join EFF Executive Director Cindy Cohn in conversation with 404 Media Cofounder Jason Koebler to discuss Privacy's Defender: My Thirty-Year Fight Against Digital Surveillance, Cindy’s personal story of standing up to the Justice Department, taking on the NSA, and tangling with the FBI to protect our...
The national cyber director is pitching an approach that blends cyber operations with diplomacy, law enforcement and pressure on CEOs to shore up their organizations.
The post Sean Cairncross lays out what’s coming next for Trump’s cyber strategy appeared first on CyberScoop.
Several security issues were fixed in YARA.
Microsoft a annoncé plusieurs nouveautés autour de l'IA dans Microsoft 365 et ses services, et une nouvelle offre M365 E7. Voici une synthèse des nouveautés.
Le post Microsoft dévoile les nouveautés de Copilot Wave 3 : Cowork, Work IQ, Microsoft 365 E7, Agent 365… a été publié sur IT-Connect.
On December 30th, 2025, we received a submission for an Authentication Bypass vulnerability in Tutor LMS Pro, a WordPress plugin estimated to have more than 30,000 active installations. The vulnerability makes it possible for an unauthenticated attacker to gain access to any account on a site includ...
Microsoft says Teams will soon automatically tag third-party bots in lobbies, allowing organizers to control whether they can join meetings. [...]
Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instances. [...]
More than 60 hacktivist groups, armed with AI, mobilized within hours of the U.S. and Israel first striking Iran, adding another element to an already active and expanding cyberthreat environment that includes dozens of known Iranian nation-state groups.
The post Pro-Iranian Hacktivists Join Nation...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Dinosaurs And Non-Dinosaurs’ appeared first on Security Boulevard.
Ce tutoriel explique comment créer des conteneurs LXC sur Proxmox VE, comment les gérer avec la commande pct, et quelles sont les bonnes pratiques.
Le post Proxmox VE : bien débuter avec les conteneurs LXC a été publié sur IT-Connect.
Ce tutoriel explique comment exécuter un conteneur LXC avec une image OCI, comme le fait Docker, directement sur un hyperviseur Proxmox VE.
Le post Proxmox VE : exécuter des images OCI (Docker) nativement dans LXC a été publié sur IT-Connect.
An analysis of 67,058 published vulnerabilities from 2025 finds 11,053, or 17%, are related to application programming interfaces (APIs). Conducted by Wallarm, the 2026 API ThreatStats Report also notes that 43% of the additions made in 2025 to the Known Exploited Vulnerabilities (KEV) catalog main...