> TODAY'S SUMMARY (7 articles)
Today's cybersecurity landscape highlights several critical developments. F5 has urgently released patches for three severe vulnerabilities in its NGINX software, underscoring ongoing risks in application delivery systems. A significant data breach at France's Assurance Retraite has compromised 70,372 email addresses, emphasizing the need for improved data protection measures. Cloudflare's introduction of Clairic aims to enhance efficiency in data extraction, potentially reducing reliance on expensive machine learning models. Additionally, ICANN is testing a new technology to facilitate law enforcement access to non-public WHOIS information, addressing emergent public safety concerns. Lastly, U.S. federal agencies have been ordered to cease using the Chinese AI service DeepSeek, reflecting rising tensions around cybersecurity and foreign technology.
|
// AI-powered summary generated at 04:00
A critical n8n flaw (CVE-2026-21858, CVSS 10.0), dubbed Ni8mare, allows unauthenticated attackers to fully take over vulnerable instances. Researchers uncovered a maximum severity n8n vulnerability, tracked as CVE-2026-21858 (CVSS score of 10.0). The flaw, dubbed Ni8mare by Cyera researchers who dis...
A spokesperson said the information relates to an incident that came to light in November, when a threat actor demanded $150,000 for allegedly stolen data.
New data suggests that ChatGPT is losing its market share to Gemini on the web. It's unclear if Gemini is also gaining ground in the mobile space. [...]
The Illinois Department of Human Services exposed personal information belonging to more than 700,000 state residents after inadvertently posting the data on the open internet where it remained for as long as four years before being taken down in September.
Session 8A: Email Security
Authors, Creators & Presenters: Ka Fun Tang (The Chinese University of Hong Kong), Che Wei Tu (The Chinese University of Hong Kong), Sui Ling Angela Mak (The Chinese University of Hong Kong), Sze Yiu Chau (The Chinese University of Hong Kong)
PAPER
A Multifaceted Stud...
The owner of a Michigan-based stalkerware company pleaded guilty to federal charges for selling a product designed to spy on people without their consent.
Researchers have released details about a critical vulnerability that was silently patched in n8n, a platform used by many companies to build LLM-powered agents and automated workflows. The flaw can allow unauthenticated attackers to completely take over local n8n deployments,...
Matthias Gerstner discovered two vulnerabilities in the Foomuuri firewall generator, which could result in tampering of the firewall configuration by unauthorised users. For the stable distribution (trixie), these problems have been fixed in version 0.27-2+deb13u1.
U.S. Immigration and Customs Enforcement (ICE) has a new budget under the current administration, and they are going on a surveillance tech shopping spree. Standing at $28.7 billion dollars for the year 2025 (nearly triple their 2024 budget) and at least another $56.25 billion over the next three ye...
Logitech's Options+ and G Hub apps on macOS stopped working after their code-signing certificate expired, leaving users unable to launch them on Apple systems. [...]
Two weeks, two major data leaks … not a good look for the European Space Agency exclusive The European Space Agency on Wednesday confirmed yet another massive security breach, and told The Register that the data thieves responsible will be subject to a criminal investigation. And this could be a bi...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Fishing’ appeared first on Security Boulevard.
Deepfakes have moved from novelty to a practical weapon — and Brian Long, CEO of Adaptive Security, says most organizations still aren’t built to handle what comes next. Long explains why AI-driven impersonation has become one of the fastest-growing forms of social engineering: it’s cheap, widely a...
A maximum severity vulnerability dubbed "Ni8mare" allows remote, unauthenticated attackers to take control over locally deployed instances of the N8N workflow automation platform. [...]
As AI becomes embedded in everyday development workflows, the security model for applications is shifting fast — and not always in ways teams are prepared for. James Wickett, CEO of DryRun Security, breaks down why “AI everywhere” is forcing organizations to rethink what application security should...
L'Autorité de protection des données (APD) belge a publié une décision prononçant une réprimande à l'encontre d'une société pour des manquements liés à la gestion des adresses de messagerie d'un ancien collaborateur.Cette affaire débute par une plainte déposée par un ancien collaborateur, signalant...
L'autorité espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de MONUMENTAL FORMA SPORT, S.L. (comprenant le prononcé d'une amende de 3 000 €) pour des manquements en lien avec le principe de minimisation des données.Cette affaire débute par une pla...
pcTattletale boss Bryan Fleming faces up to 15 years in prison when sentenced later this year The US government has secured a guilty plea from a stalkerware maker in federal court, marking just the second time in more than a decade that the US has managed to prosecute a consumer spyware vendor succe...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de BLUE TEAM ÉCOLE DE PILOTAGE, S.L. (comprenant le prononcé d'une amende de 6 000 €) pour des manquements en lien avec son obligation de coopération avec l'autorité de contrôle.Cette affai...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de EXCEL HOTELS & RESORTS, S.A., comprenant le prononcé d'une amende de 40 000 €, pour des manquements en lien avec la sécurité des données personnelles.Cette affaire débute par une plainte transmi...