> TODAY'S SUMMARY (6 articles)
Today's cyber news highlights several critical developments. Google has open-sourced TorchTPU, enhancing PyTorch compatibility with its Tensor Processing Units. Meanwhile, the US has banned DeepSeek from federal agencies, intensifying scrutiny on AI supply chains. In the UK, the FCA is advocating for mandatory reporting of significant AI failures to improve oversight. A breach at TeamUpdraft has led to the compromise of connection keys, potentially backdooring numerous WordPress sites. Lastly, major tech companies including Mozilla, Google, and Apple have blocked compromised certificates from eMudhra, following revelations of weak private keys that could be easily exploited. Security measures and regulatory frameworks are under increasing focus amid these evolving threats.
|
// AI-powered summary generated at 04:00
Learn the step-by-step authentication flow and token exchange process. Covers OIDC, OAuth2, PKCE, and enterprise SSO strategies for engineering leaders.
The post Authentication Flow Explained: Step-by-Step Login & Token Exchange Process appeared first on Security Boulevard.
Major setbacks for Black Axe and BreachForums, researchers expose new Copilot attack, and PluggyApe malware targets Ukraine's armed forces.
Une nouvelle fuite de données affecte l'État Français : la DINUM a officialisé ce vendredi 16 janvier une intrusion au sein de la plateforme HubEE.
Le post Piratage HubEE : l’État confirme la fuite de 160 000 documents avec des données sensibles a été publié sur IT-Connect.
Discover how passkeys work under the hood. Learn about WebAuthn, fido standards, and why passwordless authentication is the future of secure software development.
The post The Passkey Experience Explained appeared first on Security Boulevard.
L'autorité italienne de protection des données (Garante) a publié une décision de sanction à l'encontre de l'Institut Scolaire de Roverbella, comprenant le prononcé d'une amende de 1 000 €, pour des manquements en lien avec la communication non autorisée de données personnelles, y compris des donnée...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié ses recommandations finales concernant les modalités de recueil du consentement multi-terminaux pour l'utilisation de cookies et autres traceurs.Ces recommandations, issues d'une consultation publique menée en avril 2025, s'ap...
The phishing campaign targeted users on WhatsApp, including an Iranian-British activist, and stole the credentials of a Lebanese cabinet minister and at least one journalist.
Le portail de l'administration française Service-public.gouv.fr a informé les utilisateurs concernés d'une violation de données personnelles résultant d'un incident de sécurité chez un de ses sous-traitants.Cet incident, survenu entre le 4 et le 9 janvier 2026, a occasionné la compromission de donné...
An advanced threat actor tracked as UAT-8837 and believed to be linked to China has been focusing on critical infrastructure systems in North America, gaining access by exploiting both known and zero-day vulnerabilities. [...]
In a report a week before its Davos conference, the World Economic Foundation said 64% world business leaders are most worried about cyber fraud, replacing ransomware at their top concern. AI vulnerabilities also ranked high, as did threats fueled by geopolitics. The group argued that a coordinated...
Here’s how cybercriminals cash in on companies’ online doppelgängers, and what can be done about it.
Microsoft claims it's a Secure Launch bug We're not saying Copilot has become sentient and decided it doesn't want to lose consciousness. But if it did, it would create Microsoft's January Patch Tuesday update, which has made it so that some PCs flat-out refuse to shut down or hibernate, no matter h...
La mise à jour de janvier 2026 (KB5074109) pour Windows 11 bloque Outlook s'il y a un ou plusieurs profils POP configurés. Détails et solution dans cet article.
Le post La mise à jour de janvier pour Windows 11 bloque Outlook si vous utilisez un profil POP ! a été publié sur IT-Connect.
Black Basta has been active since at least early 2022 and is believed to be responsible for extorting hundreds of companies, hospitals and public institutions worldwide — including Swiss industrial giant ABB and U.S. healthcare provider Ascension — causing hundreds of millions of dollars in estimate...
Verizon has begun sending text messages with instructions on how to redeem a $20 account credit for last week's nationwide wireless outage. [...]
Other noteworthy stories that might have slipped under the radar: BodySnatcher agentic AI hijacking, Telegram IP exposure, shipping systems hacked by researcher.
The post In Other News: FortiSIEM Flaw Exploited, Sean Plankey Renominated, Russia’s Polish Grid Attack appeared first on SecurityWeek.
In a scathing opinion, Judge David Carter called the federal government’s demands for unredacted voter data “unprecedented and illegal.”
The post Federal court dismisses Trump DOJ lawsuit seeking California voter data appeared first on CyberScoop.
Critical WordPress Plugin Flaw Under Active Exploitation A maximum-severity vulnerability in the WordPress plugin Modular DS is being actively exploited in the wild, according to security firm Patchstack. The flaw, tracked as CVE-2026-23550, carries a CVSS score of 10.0 and allows unauthenticated at...
Ransomware kingpin who escaped Armenian custody is believed to be lying low back home German cops have added Russian national Oleg Evgenievich Nefekov to their list of most-wanted criminals for his services to ransomware.…
A data breach at Canada’s investment watchdog, Canadian Investment Regulatory Organization (CIRO), impacted about 750,000 people. The Canadian Investment Regulatory Organization (CIRO) is Canada’s national self-regulatory body overseeing investment dealers and marketplaces, protecting investors, enf...