> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights two significant vulnerabilities. A critical Broadcom Wi-Fi flaw, present since 2010, enables attackers to gain unauthorized control of routers within Wi-Fi range without needing a password. This vulnerability was brought to light by researcher Quentin Kaiser at Hexacon. Additionally, a newly discovered Linux KVM guest-host escape vulnerability, rated 9.3, poses a serious risk, potentially offering a new avenue for attacks on Linux-based systems. Both issues underscore the ongoing need for vigilance and timely patching in network and virtualization environments.
|
// AI-powered summary generated at 04:00
Des hackers ont attaqué les systèmes informatiques de l'entreprise de distribution d'eau Apele Române, en Roumanie, en cryptant presque 1000 systèmes et en réclamant une rançon. L'approvisionnement en eau n'est pas affecté pour le moment. Les autorités sont en train d'enquêter et de prendre des mesu...
L'entreprise Fiorucci a subi un attaque informatique qui a bloqué une partie significative de ses systèmes, empêchant ainsi la livraison et la prise de nouvelles commandes pendant la période des fêtes de Noël. Les équipes techniques internes et externes travaillent pour rétablir la pleine fonctionna...
PLUS: Texas sues alleged TV spies; The Cloud is full of holes; Hospital leaked its own data; And more Infosec In Brief Google will soon end its “Dark Web Report”, an email service that alerts users when their personal information appears on the internet’s dark underbelly.…
La Ville de Lens a subi une cyberattaque qui affecte le fonctionnement de ses services municipaux, mais tous les services restent accessibles aux horaires d'ouverture habituels. La municipalité a mis en place des mesures de sécurité et de protection des données et invite les usagers à ne contacter l...
Alpine Lumber Company suffered a data security incident involving ransomware, resulting in unauthorized access to employee and dependent information, including names, addresses, Social Security numbers, and health insurance information.
What Role Does Agentic AI Play in Enhancing Operational Security? Are you confident that your organization’s operational security is fortified against the myriad of threats facing us today? With cybersecurity professionals delve deeper into the complexities of protecting digital infrastructures, the...
How Are Security Gaps in Cloud Environments Addressed? What methods can be employed to ensure the safety of Non-Human Identities (NHIs) in cloud environments? Managing NHIs forms the cornerstone of a robust security strategy. These machine identities, which are crucial for seamless interactions betw...
Microsoft a révélé un bug pouvant entraîner des échecs de connexion RemoteApp sur Windows 11 et Windows Server 2025, avec les mises à jour de décembre 2025.
Le post Windows 11 : les mises à jour de décembre 2025 cassent les connexions RemoteApp a été publié sur IT-Connect.
Are Non-Human Identities the Key to Meeting Complex Security Requirements? Is your organization prepared to handle the intricate security challenges posed by the digital transformation? With digital expand, the utilization of Non-Human Identities (NHIs) becomes an imperative strategy for addressing...
What Are Non-Human Identities (NHIs) and Why Do They Matter for Enterprise Security? Cybersecurity is continually shifting, with machine identities, or Non-Human Identities (NHIs), emerging as a crucial facet for robust security management. But why should NHIs hold your attention? NHIs are machine-g...
Multiple security issues were discovered in the Rails web framework which could result in command injection or logging of unescaped ANSI sequences. For the oldstable distribution (bookworm), these problems have been fixed in version 2:6.1.7.10+dfsg-1~deb12u2.
Session 6D: Software Security: Vulnerability Detection
Authors, Creators & Presenters: Jiangyi Deng (Zhejiang University), Xinfeng Li (Zhejiang University), Yanjiao Chen (Zhejiang University), Yijie Bai (Zhejiang University), Haiqin Weng (Ant Group), Yan Liu (Ant Group), Tao Wei (Ant Group), We...
More than a 1,000 Docker Hardened Images (DHI) are now freely available and open source for software builders, under the Apache 2.0 license. [...]
Multiple security issues were discovered in the WordPress blogging tool, which could result in cross-site scripting or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 6.8.3+dfsg1-0+deb13u1. We recommend that you upgrade your wordpress packages.
ShinyHunters menace de divulguer des clients premium de Pornhub et réclame une rançon en bitcoin, sur fond d’incident Mixpanel....
Google’s latest Android security updates are drawing renewed scrutiny this week as revisions, staggered patch rollouts, and follow-on fixes converge across the Android ecosystem. While the underlying security bulletin itself is not new, the way updates are landing on devices now is creating a sense...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks Operation MoneyMount-ISO — Deploying Phantom S...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ATM Jackpotting ring busted: 54 indicted by DoJ U...
New regulatory disclosures have confirmed that a cyberattack on financial services vendor Marquis exposed sensitive personal and financial information belonging to more than 400,000 bank and credit union customers across the United States. According to filings submitted to state authorities, attacke...
Un pirate informatique a décidé de vider son sac suite à l’affaire de la fuite de données de l’ANTS. Retour sur ce qui aurait pu paraître anodin avec des informations sur le gang Lapsus/Shiny Hunters....