Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 143.0.7499.169-1~deb12u1.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disclosure. For the stable distribution (trixie), these problems have been fixed in version 8.4.16-1~deb13u1.
Organisations today are increasingly exposed to cyber risks originating from unchecked network scanning and unpatched vulnerabilities. At the same time, the rise of malicious large language models like WormGPT and FraudGPT has lowered the barrier for hackers, enabling even less-skilled actors to lau...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How researchers are teaching AI agents to ask for permission the right way People are starting to hand more decisions to AI agents, from booking trips to sorting digital files. The idea sounds simple. T...
The Kimwolf Android botnet has infected 1.8M+ devices, launching massive DDoS attacks and boosting its C&C domain, says XLab. Kimwolf is a newly discovered Android botnet linked to the Aisuru botnet that has infected over 1.8 million devices and issued more than 1.7 billion DDoS attack commands,...
A rare case of deliberately trying to induce an outage A staffer at the USA’s National Institute of Standards and Technology (NIST) tried to disable backup generators powering some of its Network Time Protocol infrastructure, after a power outage around Boulder, Colorado, led to errors.…
Threat hunters have discerned new activity associated with an Iranian threat actor known as Infy (aka Prince of Persia), nearly five years after the hacking group was observed targeting victims in Sweden, the Netherlands, and Turkey.
"The scale of Prince of Persia's activity is more significant than...
Information published.
Information published.
La société a subi une attaque informatique, mais aucune fuite de données n'a été détectée et l'incident n'a pas d'impact significatif sur les opérations. La société a pris des mesures de sécurité pour atténuer les risques et continuera à surveiller la situation. Les systèmes d'information de la soci...
Information published.
Information published.
Trois entités de santé ont été touchées par des incidents de cybersécurité. Singing River Health System (Mississippi) a confirmé que près de 54 000 individus ont été affectés par une cyberattaque survenue entre le 19 et le 21 décembre 2025, exposant des informations détaillées des patients (y compri...
Information published.
Information published.
Le Département du Commerce et de l'Industrie (DTI) a été victime d'une cyberattaque par rançongiciel (ransomware) le 21 décembre 2025. L'attaque a rendu impossible la récupération des registres comptables de l'agence. En raison de l'absence de sauvegardes accessibles (serveur partagé, cloud inaccess...
Information published.
Information published.
Are Non-Human Identities the Missing Piece in Cloud Security? Where data breaches and cyber threats are a constant concern, the question of how organizations can effectively manage cloud security has become more critical than ever. Non-Human Identities (NHIs) are emerging as a vital component, offer...
Information published.