[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Judge dismisses case alleging use of Flock cameras in Virginia city is unconstitutional
A Virginia federal judge ruled that the warrantless use of Flock automated license plate cameras in Norfolk, Virginia, is constitutional and dismissed a case seeking to eradicate them.
> When Hospitals Go Dark and Browsers Turn Rogue
At 6:32 a.m., a hospital in Belgium pulled the plug on its own servers. Something was already inside the network, and no one could say how far it had spread. By mid-morning, scheduled procedures were canceled. Critical patients were transferred out with help from the Red Cross. Staff went back to pa...
> Beware: Government Using Image Manipulation for Propaganda
U.S. Homeland Security Secretary Kristi Noem last week posted a photo of the arrest of Nekima Levy Armstrong, one of three activists who had entered a St. Paul, Minn. church to confront a pastor who also serves as acting field director of the St Paul Immigration and Customs Enforcement (ICE) office....
> Beware: Government Using Image Manipulation for Propaganda
U.S. Homeland Security Secretary Kristi Noem last week posted a photo of the arrest of Nekima Levy Armstrong, one of three activists who had entered a St. Paul, Minn. church to confront a pastor who also serves as acting field director of the St Paul Immigration and Customs Enforcement (ICE) office....
> WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users
Meta announced new Strict Account Settings on WhatsApp to better protect high-risk users from advanced cyber attacks. Meta announced new Strict Account Settings on WhatsApp to enhance the security of high-risk users from advanced, targeted cyber attacks. “Strict Account Settings is one of many ways...
> NDSS 2025 – On the Robustness Of LDP Protocols For Numerical Attributes Under Data Poisoning Attacks
Session 10C: Privacy Preservation Authors, Creators & Presenters: Xiaoguang Li (Xidian University, Purdue University), Zitao Li (Alibaba Group (U.S.) Inc.), Ninghui Li (Purdue University), Wenhai Sun (Purdue University, West Lafayette, USA) PAPER On the Robustness of LDP Protocols for Numerical...
> Ubuntu 25.10 OpenSSL Important DoS Security Advisory USN-7980-1
Several security issues were fixed in OpenSSL.
> WhatsApp unveils anti-spyware ‘lockdown’ feature
WhatsApp is rolling out a new security feature designed to curb spyware that will block attachments and media from people not in a user’s contacts list.
> Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim
Plus, the gang says it got in via Microsoft Entra SSO ShinyHunters says it stole several slices of data from Panera Bread, but that's just the yeast of everyone's problems. The extortionist gang also claims to have stolen data from CarMax and Edmunds, in addition to three other organizations it post...
> Debian OpenSSL Critical DSA-6113-1 DoS Information Leak Execution
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentially remote code execution. Additional details can be found in the upstream advisory: https://openssl-library.org/news/secadv/20260127.txt
> WinRAR path traversal flaw still exploited by numerous hackers
Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity vulnerability in WinRAR for initial access and to deliver various malicious payloads. [...]
> A lawsuit is challenging WhatsApp’s encryption claims. Here’s what we know.
A class-action lawsuit challenges WhatsApp’s end-to-end encryption claims. We break down the allegations, denials, and what’s actually known.
> LayerX Discovers Malicious Chrome Extensions Stealing ChatGPT Accounts
Security researchers from LayerX discovered 16 malicious Chrome extensions created by the same threat actor designed to intercept users' interaction with ChatGPT chatbots and steal their account credentials, the latest instance in a growing trend. The post LayerX Discovers Malicious Chrome Extensio...
> Chinese money launderers moved more than $16 billion of illicit crypto in 2025, report finds
In 2025, Chinese-language organizations laundered on average $44 million in illicit crypto each day, amounting to $16.1 billion.
> AI is Now Default Enterprise Accelerator: Takeaways from ThreatLabz 2026 AI Security Report
Artificial intelligence and machine learning (AI/ML) are no longer emerging capabilities inside enterprise environments. In 2025, they became a persistent operating layer for how work gets done. Developers ship faster, marketers generate more content, analysts automate research, and IT teams rely on...
> File integrity monitoring with AWS Systems Manager and Amazon Security Lake 
Customers need solutions to track inventory data such as files and software across Amazon Elastic Compute Cloud (Amazon EC2) instances, detect unauthorized changes, and integrate alerts into their existing security workflows. In this blog post, I walk you through a highly scalable serverless file in...
> Clawdbot devient Moltbot : cet assistant IA affole tout le monde, mais attention à vos données !
L'assistant personnel IA Clawdbot devient Moltbot : si vous décidez de l'auto-héberger sur un serveur, attention à la sécurité, car vos données sont exposées. Le post Clawdbot devient Moltbot : cet assistant IA affole tout le monde, mais attention à vos données ! a été publié sur IT-Connect.
> USN-7981-1: wlc vulnerabilities
It was discovered that wlc did not correctly handle SSL verification. An attacker could possibly use this issue to access sensitive resources. (CVE-2026-22250) It was discovered that wlc did not correctly handle API keys. An attacker could possibly use this issue to leak API keys to a malicious ser...
> USN-7980-1: OpenSSL vulnerabilities
Stanislav Fort, Petr Ơimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11187)...
> Test Geekom A7 Max : un mini PC avec un AMD Ryzen 9, 16 Go de RAM DDR5 et 2 interfaces LAN
Découvrez le Geekom A7 MAX : une nouveauté de cette année 2026. Ce mini PC est équipé d'un AMD Ryzen 9 7940HS, de 16 Go de RAM DDR5 et d'un SSD NVMe (1 To). Le post Test Geekom A7 Max : un mini PC avec un AMD Ryzen 9, 16 Go de RAM DDR5 et 2 interfaces LAN a été publié sur IT-Connect.