> TODAY'S SUMMARY (84 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The rise of deepfakes and voice cloning poses significant challenges for user identity verification, especially in sensitive environments. A recent drone strike on VK's data center has led to service disruptions, while Drupal warns of a rapidly exploitable RCE flaw in its core systems. Additionally, a supply chain attack compromised the Rank Math PRO WordPress plugin, injecting malware into legitimate updates. The U.S. Department of Homeland Security has issued a ban on DeepSeek due to national security concerns, emphasizing the ongoing risks associated with data transmission to foreign servers. Furthermore, the alarming statistic from Moody's reveals that known exploited vulnerabilities take an average of 87 days to patch, underscoring the urgent need for improved response strategies in cybersecurity.
|
// AI-powered summary generated at 16:01
Firewall audit failures are not edge cases anymore. They are the norm. Across industries, nearly 60% of firewalls fail at least one high-severity check during audits and internal assessments. These...
The post Why 60% of Firewalls Fail High-Severity Checks and How NSPM Fixes It appeared first on Sec...
Session 7C: Secure Protocols
Authors, Creators & Presenters: Daniel J. Bernstein (University of Illinois at Chicago and Academia Sinica), Tanja Lange (Eindhoven University of Technology amd Academia Sinica), Jonathan Levin (Academia Sinica and Eindhoven University of Technology), Bo-Yin Yang (Ac...
You didn't think you'd get to enjoy your time off without a major cybersecurity incident, did you? A high-severity MongoDB Server vulnerability, for which proofs of concept emerged over Christmas week, is now under active exploitation, according to the US Cybersecurity and Infrastructure Security Ag...
Le Conseil d'État a partiellement annulé une délibération de la Commission nationale de l'informatique et des libertés (CNIL) et a réduit l'amende de 32 millions d'euros infligée à la société Amazon France Logistique (cf. notre fiche dédiée sur cette sanction).La société contestait une délibération...
Throughout 2025, EFF conducted groundbreaking investigations into Flock Safety's automated license plate reader (ALPR) network, revealing a system designed to enable mass surveillance and susceptible to grave abuses. Our research sparked state and federal investigations, drove landmark litigation, a...
Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT and DeepSeek and browser history. The incident is the latest in a growing string of attacks in which hackers weaponized browser extensions to exfiltrate huge amounts of sensit...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de NAROBESA INV, S.L. comprenant le prononcé d'une amende de 2 000 € pour des manquements liés à son obligation de coopération avec l'autorité de contrôle.Cette affaire débute par une plainte déposée a...
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) a publié une décision de sanction à l'encontre de Roumasport S.R.L, comprenant le prononcé d'une amende de 50 920 lei (10 000 €), pour des manquements en lien avec la sécurité des données personnelles.Cett...
You might not know it, given the many headlines focused on new questions about copyright and Generative AI, but the year’s biggest copyright case concerned an old-for-the-internet question: do ISPs have to be copyright cops? After years of litigation, that question is now squarely before the Supreme...
Un outil gratuit exploite la méthode Silent Whisper pour espionner les utilisateurs de WhatsApp et Signal, à distance, et agit comme un tracker.
Le post Méthode Silent Whisper : cet outil gratuit permet d’espionner les utilisateurs de WhatsApp et Signal a été publié sur IT-Connect.
Two Americans who worked for incident response firms face up to 20 years in prison for turning ransomware upon U.S. businesses.
The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve remote code execution.
The vulnerability, tracked as CVE-2025-52691, carries a CVSS score of 10.0. It relates t...
The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which contained what it described as "unclassified" information on collaborative engineering activities. [...]
Apple’s App Store source map leak shows a preventable risk we found in 70% of organizations shipping production web apps.
The post Apple’s App Store Source Map Leak: A Preventable Vulnerability We Found in 70% of Organizations appeared first on Security Boulevard.
Session 7C: Secure Protocols
Authors, Creators & Presenters: Pengzhi Xing (University of Electronic Science and Technology of China), Hongwei Li (University of Electronic Science and Technology of China), Meng Hao (Singapore Management University), Hanxiao Chen (University of Electronic Science...
New wget2 packages are available for Slackware 15.0 and -current to fix security issues.
New gnupg2 packages are available for Slackware 15.0 and -current to fix security issues.
Lens victime d’une intrusion : services municipaux dégradés, téléphonie et portail famille touchés, plainte déposée. Pendant ce temps, LockBit 5.0 fête Noël....
A newly discovered campaign, which researchers call Zoom Stealer, is affecting 2.2 million Chrome, Firefox, and Microsoft Edge users through 18 extensions that collect online meeting-related data like URLs, IDs, topics, descriptions, and embedded passwords. [...]
Cyber-IA expo 2026 à Paris : cyber et IA, NIS2, démonstrations, gouvernance et édition Munich annoncée....