> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape is marked by several critical threats and trends. Recently patched vulnerabilities in Barracuda devices are being actively exploited, allowing attackers root access. Cisco's BroadWorks and Openwave flaws are also under attack despite available patches. Apple has addressed Bluetooth and AirPlay vulnerabilities, reinforcing the need for prompt patching as 45% of EU IT service providers delay critical updates. New malware threatens Exchange servers, and leaked exploit kits are compromising iPhones via ads. Additionally, Microsoft released a substantial patch update addressing 1,094 vulnerabilities, including a critical zero-day in Outlook that risks credential theft. Cybersecurity resilience remains a priority as organizations grapple with the rising tide of AI-discovered vulnerabilities.
|
// AI-powered summary generated at 08:00
L'autorité espagnole de protection des données a publié une décision de sanction à l'encontre d'une personne physique (comprenant le prononcé d'une amende de 1 000 €) pour des manquements en lien avec la publication de données personnelles sans base légale sur un réseau social. Cette affaire débute...
L'Autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la société Moyens de Prévention Externes, S.L., comprenant le prononcé d'une amende de 100 000 €, pour des manquements en lien avec l'obligation de garantir l'intégrité et la confidentialité des d...
'First time we have detected a crime using this method,' cops say Spanish police arrested a hacker who allegedly manipulated a hotel booking website, allowing him to pay one cent for luxury hotel stays. He also raided the mini-bars and didn't settle some of those tabs, police say.…
Le Comité Européen de la Protection des Données (CEPD) a adopté un rapport sur son action d'application coordonnée analysant la mise en œuvre du droit à l'effacement.Cette initiative, menée en 2025 dans le cadre du Cadre d'Application Coordonnée (CEF), a impliqué 32 autorités de protection des donné...
L'autorité espagnole de protection des données (AEPD) a publié des orientations sur l'utilisation de l'intelligence artificielle agentique dans le cadre des traitements de données personnelles.Ces orientations définissent l'IA agentique comme des systèmes capables d'interagir de manière autonome pou...
The Figure data breach allowed hackers to steal customer names, dates of birth, physical addresses, phone numbers, and email addresses.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Cost Savings’ appeared first on Security Boulevard.
New research from the Citizen Lab has found signs that Kenyan authorities used a commercial forensic extraction tool manufactured by Israeli company Cellebrite to break into a prominent dissident's phone, making it the latest case of abuse of the technology targeting civil society.
The interdiscipli...
State disputes the company's claim that its routers are made in Vietnam TP-Link is facing legal action from the state of Texas for allegedly misleading consumers with "Made in Vietnam" claims despite China-dominated manufacturing and supply chains, and for marketing its devices as secure despite rep...
A database left accessible to anyone online contained billions of records, including sensitive personal data that criminals appear to have not yet exploited.
Several security issues were fixed in libssh.
This breach now appears far more serious. The leaked data includes rich personal and financial details that phishers could use.
Insider threats can be accidental or deliberate, but they're always dangerous: Find out how to protect your business.
USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update
provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
and Ubuntu 20.04 LTS.
Original advisory details:
Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled
certain environment variable...
Attorney General Ken Paxton announced the lawsuit on Monday and said it is the first of several that will be filed this week against companies affiliated with China's government.
Learn how to prevent 50% of detection failures caused by log delivery chain issues. Master persistent queuing, schema drift mitigation, and automated recovery for zero data loss SOC operations.
The post Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines appeared...
National rail bookings and timetables disrupted for nearly 24 hours If you wanted to book a train trip in Germany recently, you would have been out of luck. The country's national rail company says that its services were disrupted for hours because of a cyberattack.…
Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an attacker to seize control of susceptible devices.
The vulnerability, tracked as CVE-2026-2329, carries a CVSS score of 9.3 out of a maximum of 10.0. It has been desc...
Accès illégaux à FICOBA fin janvier 2026, 1,2 million de comptes copiés par un pirate....
Underground Telegram channels shared SmarterMail exploit PoCs and stolen admin credentials within days of disclosure. Flare explains how monitoring these communities reveals rapid weaponization of CVE-2026-24423 and CVE-2026-23760 tied to ransomware activity. [...]