> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
L'ordre du jour de la séance pléniÚre de la Commission nationale de l'informatique et des libertés (CNIL) du 5 février 2026 a été publié par la CNIL.
Partie I (avec débats):
* Communication relative aux conditions de recours, dans le cadre de la lutte contre les dépÎts sauvages, à des outils de c...
L'autorité italienne de protection des données (Garante) a sanctionné le Centre Hospitalier S. Pio de Bénévent pour avoir illégalement communiqué les données de santé d'un employé dans le cadre d'un contentieux interne.Suite à la plainte d'un employé, il a été établi que l'établissement avait transm...
A newly discovered toolkit called DKnife has been used since 2019 to hijack traffic at the edge-device level and deliver malware in espionage campaigns. [...]
Le Commissaire fédéral à la protection des données et à la liberté d'information (BfDI) a organisé un atelier de réflexion avec des experts pour discuter de l'articulation entre le RGPD et le RÚglement sur les données.Lors d'un échange le 5 février 2026, 13 représentants d'entreprises, d'association...
La Commission Nationale de l'Informatique et des Libertés (CNIL) expérimente un nouveau parcours utilisateur en ligne pour accompagner les personnes dans leurs démarches relatives aux fichiers d'incidents bancaires.Cette initiative répond aux 400 demandes d'informations annuelles reçues par l'autori...
The two-line letter to the CIA's director is the latest warning in recent years from a long-serving Democratic senator with knowledge of secret government programs and intelligence operations.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- SMB network file system;
- io_uring subsystem;
(CVE-2025-38561, CVE-2025-39698, CVE-2025-40...
The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks. [...]
Threat actors using LLMs needed only eight minutes to move from initial access to full admin privileges in an attack on a company's AWS cloud environment in the latest example of cybercriminals expanding their use of AI in their operations, Sysdig researchers said.
The post Attackers Used AI to Bre...
DKnife is a Chinese made malware framework that targets Chinese-based users
Attackers may have snapped user locations and activity information, message warns Legacy image-sharing website Flickr suffered a data breach, according to customers emails seen by The Register.âŠ
Focus sur les Initial Access Brokers : ces pirates experts de la brÚche qui revendent l'accÚs aux réseaux d'entreprise. Comment font-ils ? Comment se protéger ?
Le post Initial Access Broker : leur rÎle clé dans les cyberattaques et les ransomwares a été publié sur IT-Connect.
The preliminary findings follow an investigation that began in February 2024 probing features such as âinfinite scroll, autoplay, push notifications, and its highly personalised recommender system,â the European Commission said in a press release.
UK leaps to sixth in global flood charts as mega-swarm unleashes 31.4 Tbps Yuletide pummeling Cloudflare says DDoS crews ended 2025 by pushing traffic floods to new extremes, while Britain made an unwelcome leap of 36 places to become the world's sixth-most targeted location.âŠ
Microsoft has released LiteBox, an experimental open-source library OS designed to sandbox applications while reducing their exposure to host systems. Written in Rust and published under the MIT license, LiteBox reflects the companyâs efforts to upgrade software security as confidential computing g...
Substack did not specify the number of users affected by the data breach
Anthropic only released its latest large language model, Claude Opus 4.6, on Thursday, but it has already been using it behind the scenes to identify zero-day vulnerabilities in open-source software.
In the trial, it put Claude inside a virtual machine with access to the la...
Kyle Svara of Oswego, Illinois is facing decades in prison after pleading guilty to aggravated identity theft, wire fraud, computer fraud, conspiracy to commit computer fraud and false statements related to child pornography.
New openssl packages are available for Slackware 15.0 to fix security issues.
There is a time window for every act of online fraud. When a transaction occurs, a fraud system must review it and decide if itâs legitimate before the payment clears or if the account could be compromised. That window happens in a blink, often one-tenth of a second or less. During that time, model...