> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical issues. Oracle has released patches for over 1,200 vulnerabilities, including nearly 100 rated as critical, with significant updates to Fusion Middleware. The FBI and CISA report that SafePay ransomware has targeted over 600 organizations using stolen credentials and double extortion tactics. Additionally, vulnerabilities in PHP, particularly the PHP2Shell issues, are being actively exploited, emphasizing the need for immediate updates. Furthermore, a supply chain attack linked to China-based hackers has compromised ConnectWise's Cloud Backup application, illustrating ongoing threats from state-aligned actors. In privacy news, Meta faces a staggering $25 billion fine for deceiving users about privacy practices.
|
// AI-powered summary generated at 08:01
La Commission de protection des informations personnelles (PIPC) a sanctionné la société NHN Commerce suite à une violation de données personnelles survenue via une ancienne solution de boutique en ligne.Une attaque par injection SQL, survenue en septembre 2024, a affecté la solution "e-namu" de NHN...
A new joint investigation by SentinelOne SentinelLABS, and Censys has revealed that the open-source artificial intelligence (AI) deployment has created a vast "unmanaged, publicly accessible layer of AI compute infrastructure" that spans 175,000 unique Ollama hosts across 130 countries.
These system...
La Commission de protection des informations personnelles (PIPC) sud-coréenne a infligé une amende de 534 millions de wons (environ 358 000 €) à la société Tmoney pour des manquements à ses obligations de sécurité ayant conduit à une fuite de données.L'enquête, initiée après une notification de viol...
Deux suspects visés après la découverte d’un site présumé de tueurs à gages payé en cryptomonnaie....
Today, we’re launching Encrypt It Already, our push to get companies to offer stronger privacy protections to our data and communications by implementing end-to-end encryption. If that name sounds a little familiar, it’s because this is a spiritual successor to our 2019 campaign, Fix It Already, a c...
Today, we’re launching Encrypt It Already, our push to get companies to offer stronger privacy protections to our data and communications by implementing end-to-end encryption. If that name sounds a little familiar, it’s because this is a spiritual successor to our 2019 campaign, Fix It Already, a c...
Match Group, the owner of multiple popular online dating services, Tinder, Match.com, Meetic, OkCupid, and Hinge, confirmed a cybersecurity incident that compromised user data. [...]
The testimony by Army Lt. Gen. Joshua Rudd about the importance of Section 702 of the Foreign Intelligence Surveillance Act (FISA) could put him at loggerheads with the commander-in-chief and other national security officials, such as Director of National Intelligence Tulsi Gabbard, who has disparag...
WIRED asked an active military officer to break down immigration enforcement actions in Minneapolis and elsewhere.
Marquis Software Solutions, a Texas-based financial services provider, is blaming a ransomware attack that impacted its systems and affected dozens of U.S. banks and credit unions in August 2025 on a security breach reported by SonicWall a month later. [...]
The French data protection authority fined the country's national employment agency nearly $6 million for poor data security.
Arrestations après une vague de swatting, doxing et fausses alertes à la bombe....
Google has taken coordinated action against the massive IPIDEA residential proxy network, enhancing customer protections and disrupting cybercrime operations
EFF has long warned about the dangers of the “real-time bidding” (RTB) system powering nearly every ad you see online. A proposed class-action settlement with Google over their RTB system is a step in the right direction towards giving people more control over their data. Truly curbing the harms of...
EFF has long warned about the dangers of the “real-time bidding” (RTB) system powering nearly every ad you see online. A proposed class-action settlement with Google over their RTB system is a step in the right direction towards giving people more control over their data. Truly curbing the harms of...
Season 5, EP 01: Unpacking RTO fallout, endpoint sprawl, tooling fatigue, junior workforce erosion
The post The Security Debt We Pretend Isn’t There appeared first on Security Boulevard.
AI chat toy company Bondu left its web console almost entirely unprotected. Researchers who accessed it found nearly all the conversations children had with the company's stuffed animals.
The Chocolate Factory strikes again, targeting the infrastructure attackers use to stay anonymous Crims love to make it look like their traffic is actually coming from legit homes and businesses, and they do so by using residential proxy networks. Now, Google says it has "significantly degraded" wha...
The 2026 Microsoft Data Security Index explores one of the most pressing questions facing organizations today: How can we harness the power of generative while safeguarding sensitive data?
The post New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data appear...
Grâce à un fichier de configuration YAML, WinGet DSC peut effectuer la configuration d'une machine Windows et même procéder à l'installation de logiciels.
Le post WinGet DSC : une approche moderne pour préparer une machine Windows 11 a été publié sur IT-Connect.