[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Google: Half of 2025’s 90 Exploited Zero-Days Aimed at Enterprises
Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead.  The post Google: Half of 2025’s 90 Exploited Zero-Days Aimed at Enterprises appeared first on SecurityWeek.
> Invisible Lifelines: DCIM Empowers Healthcare Teams
Hospital system downtime puts patient lives at immediate risk. Every second of network failure delays critical care and halts emergency operations. Data Center Infrastructure Management (DCIM) software stops these dangerous outages before they happen. Healthcare teams rely on DCIM tools to monitor i...
> 3 Data-Based Shifts Defining AI-Native Cybersecurity Stacks
The SOC is changing faster than you realize. Discover the 3 data-based shifts defining the AI-native cybersecurity era: from upstream detection to AI-powered triage and enrichment. The post 3 Data-Based Shifts Defining AI-Native Cybersecurity Stacks appeared first on Realm.Security. The post 3 Data-...
> Russian APT targets Ukraine with BadPaw and MeowMeow malware
Researchers uncovered a Russian campaign targeting Ukrainian entities with new malware families BadPaw and MeowMeow delivered through phishing emails. Researchers reported a phishing campaign linked to Russia that targets Ukrainian organizations using two new malware families, BadPaw and MeowMeow. T...
> Google says 90 zero-days exploited in 2025 as commercial vendor activity grows
Google Threat Intelligence Group said it tracked 90 zero-day vulnerabilities that were exploited by a variety of actors last year, surpassing the 78 that were used by threat actors in 2024.
> Ubuntu 20.04 LTS NSS Critical DoS Risk USN-8071-2 CVE-2026-2781
NSS could be made to crash or run programs if it received specially crafted network traffic.
> Push Security adds malicious browser extension detection to block threats in employee browsers
Push Security has announced new malicious browser extension detection and blocking capabilities within its browser-based security platform. The feature enables organizations to automatically block known-bad extensions from running in employee browsers. Attackers are increasingly turning to malicious...
> How to de-identify financial documents with Tonic Textual
Financial documents are rich with insight but packed with PII. This guide shows how to safely de-identify bank statements and financial text using Tonic Textual for compliant analytics and AI workflows. The post How to de-identify financial documents with Tonic Textual appeared first on Security Bou...
> Common ecommerce security vulnerabilities and testing strategies
Ecommerce platforms represent one of the most consistently targeted areas of the modern digital estate. They process payment data, store personal information, integrate with logistics and marketing systems, and underpin revenue for many large businesses. The combination of financial value and sensit...
> GWS : la nouvelle CLI Google taillée pour l’administration et les agents IA
Google Workspace CLI (ou gws) est un outil en ligne de commande officiel qui permet d'administrer les services Google Workspace depuis votre terminal. Le post GWS : la nouvelle CLI Google taillée pour l’administration et les agents IA a été publié sur IT-Connect.
> IRONSCALES Adds Three AI Agents Trained to Automate Cybersecurity Tasks
IRONSCALES today revealed it has developed three artificial intelligence (AI) agents for its email security platform, including one that conducts red team attacks to uncover vulnerabilities and weaknesses that adversaries can exploit. Audian Paxson, principal technical strategist for IRONSCALES, sa...
> ‘We’re not trying to remake the economy’: FTC’s Mufarrige charts new course on tech enforcement
The FTC's Bureau of Consumer Protection chief discussed the agency’s embrace of age verification and how industry should think about data privacy enforcement under his watch.
> Coruna iOS exploit kit moved from spy tool to mass criminal campaign in under a year
Google’s threat intelligence researchers have identified a sophisticated exploit kit targeting iPhones that was first used by a commercial surveillance vendor’s customer before being repurposed by a suspected Russian espionage group and then by Chinese cybercriminals, highligh...
> ContextCrush Flaw Exposes AI Development Tools to Attacks
Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools
> Ending the "silent drop": how Dynamic Path MTU Discovery makes the Cloudflare One Client more resilient
The Cloudflare One Client now features the ability to actively probe and adjust packet sizes. This update eliminates the problems caused by tunnel layering and MTU differences, providing more stability and resiliency. 
> The Government Uses Targeted Advertising to Track Your Location. Here's What We Need to Do.
We've all had the unsettling experience of seeing an ad online that reveals just how much advertisers know about our lives. You're right to be disturbed. Those very same online ad systems have been used by the government to warrantlessly track peoples' locations, new reporting has confirmed. For yea...
> Why Threat-Led Defense Should Be on Every CISO’s Priority List in 2026
  The post Why Threat-Led Defense Should Be on Every CISO’s Priority List in 2026 appeared first on Security Boulevard.
> Look What You Made Us Patch: 2025 Zero-Days in Review
Written by: Casey Charrier, James Sadowski, Zander Work, Clement Lecigne, Benoît Sevens, Fred Plan Executive Summary Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities exploited in-the-wild in 2025. Although that volume of zero-days is lower than the record high observed in...
> The Government Uses Targeted Advertising to Track Your Location. Here's What We Need to Do.
We've all had the unsettling experience of seeing an ad online that reveals just how much advertisers know about our lives. You're right to be disturbed. Those very same online ad systems have been used by the government to warrantlessly track peoples' locations, new reporting has confirmed. For yea...
> DataDome and Botify Partner to Give Businesses Full Control Over Agentic Commerce, from Discovery to Transaction
DataDome and Botify partner to help businesses optimize agentic commerce—ensuring AI agents can discover products and transact securely. The post DataDome and Botify Partner to Give Businesses Full Control Over Agentic Commerce, from Discovery to Transaction appeared first on Security Boulevard.