> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical issues. Oracle has released patches for over 1,200 vulnerabilities, including nearly 100 rated as critical, with significant updates to Fusion Middleware. The FBI and CISA report that SafePay ransomware has targeted over 600 organizations using stolen credentials and double extortion tactics. Additionally, vulnerabilities in PHP, particularly the PHP2Shell issues, are being actively exploited, emphasizing the need for immediate updates. Furthermore, a supply chain attack linked to China-based hackers has compromised ConnectWise's Cloud Backup application, illustrating ongoing threats from state-aligned actors. In privacy news, Meta faces a staggering $25 billion fine for deceiving users about privacy practices.
|
// AI-powered summary generated at 08:01
Intrusion 2024 chez France Travail, CNIL inflige 5 M€ et impose des correctifs après accès massif à des données....
The French data protection authority fined the national employment agency €5 million (nearly €6 million) for failing to secure job seekers' data, which allowed hackers to steal the personal information of 43 million people. [...]
RAMP was used by Russian, Chinese and English-speaking cybercriminals and particularly catered to ransomware groups and their affiliates.
Executive Overview Modern cyberattacks rarely appear as a single loud event. Instead, they unfold as low-and-slow sequences across endpoints, networks, and identity platforms. Attackers blend into normal enterprise activity, using legitimate tools, valid credentials, and trusted services to evade tr...
Most employees don’t ignore security training because they don’t care. They ignore it because it doesn’t feel real. A slide deck once a year. A short quiz at the end. A reminder to “stay vigilant.” These formats are familiar, easy to roll out, and easy to measure. They are also poorly suited for the...
The four critical flaws could be exploited without authentication for remote code execution or authentication bypass.
The post SolarWinds Patches Critical Web Help Desk Vulnerabilities appeared first on SecurityWeek.
Fortinet Patches Actively Exploited FortiCloud SSO Zero-Day (CVE-2026-24858) Fortinet has begun releasing security updates to address CVE-2026-24858, a critical zero-day vulnerability that allowed attackers to bypass FortiCloud single sign-on (SSO) authentication and gain administrative access to Fo...
The dark web forum administrator confirmed the takedown and said they had “no plans to rebuild”
This week’s updates show how small changes can create real problems. Not loud incidents, but quiet shifts that are easy to miss until they add up. The kind that affects systems people rely on every day.
Many of the stories point to the same trend: familiar tools being used in unexpected ways. Securi...
Ransomware victims surged in Q4 2025 despite fewer active extortion groups, with data leaks rising 50%, ReliaQuest researchers report
Une faille critique (CVE-2026-24061) a été découverte dans InetUtils utilisé par Telnet. Elle permet d'obtenir un accès root en une seule commande, à distance.
Le post Un accès root en une seule commande : cette faille dans GNU InetUtils menace les accès Telnet a été publié sur IT-Connect.
In cybersecurity, we live by our metrics. We measure Mean Time to Respond (MTTR), Dwell Time, and Patch Cadence. These numbers tell the Board how fast we react when things go wrong.
But in the era of Agentic AI, reaction speed is no longer enough. When an AI Agent or an MCP server is compromised, da...
Core file operations in Proton Drive now use the Drive SDK for faster, more reliable performance. See our progress and what’s coming in 2026.
Non-profit ITRC says the number of data breaches increased 5% annually to reach a record total in 2025
Two critical sandbox escape flaws in the popular n8n workflow automation platform are allowing authenticated users to achieve remote code execution on affected instances.
According to new JFrog findings, sandboxing safeguards meant to contain untrusted workflow logic can be...
Detego Global launches Detego Detective, a free browser-based mini-game designed to give DFIR professionals a quick mental reset while reflecting the real-world pressures of digital investigations.
Close call after an apparently deliberate attempt to starve a country of energy at the worst time Cybersecurity experts involved in the cleanup of the cyberattacks on Poland's power network say the consequences could have been lethal.…
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination that has no precise route and may never be reached.
The post Cyber Insights 2026: Zero Trust and Following the Path appeared first on SecurityWeek.
Software signatures carry an invisible expiration date. The container image or firmware you sign today might be deployed for 20 years, but the cryptographic signature protecting it may become untrustworthy within 10 years. SHA-1 certificates become worthless, weak RSA keys are banned, and quantum co...