> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape is marked by several significant threats and trends. A sophisticated North Korean hacking group has used fake employment schemes to execute a record $6.4 billion theft from Binance, highlighting the dangers of social engineering. UK officials have warned of imminent AI-powered ransomware attacks targeting critical infrastructure, predicting a surge in such incidents by 2028. Additionally, enterprises face financial losses of up to $1 million per day from LLMjacking attacks that exploit large language models for unauthorized cloud resource usage. Meanwhile, Google dismantled a massive botnet of 1.3 million Android TV boxes that was involved in ad fraud. Lastly, multiple vulnerabilities have been discovered across various platforms, including critical flaws in Node-RED and Siemens devices, necessitating immediate attention from IT security teams.
|
// AI-powered summary generated at 20:00
Japan’s National Police Agency confirmed the arrest and extradition to Germany of a Russian national accused of being involved in the Qilin ransomware gang.
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X.
ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. Th...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...]
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. [...]
La Commission européenne a tenu une réunion spéciale de son groupe scientifique sur l'intelligence artificielle (IA) de pointe afin d'examiner les recommandations sur la sécurité et la sûreté de ces technologies.Ce groupe, composé de 60 experts indépendants, conseille le Bureau de l'IA de l'Union eu...
Le président de l'autorité polonaise de protection des données (UODO), a souligné lors de la conférence des journées Cyber24 la nécessité d'instaurer une certification pour les sous-traitants traitant des données sensibles, en réaction aux récentes cyberattaques massives dans le secteur médical.Lors...
EFF was thrilled to join organizers, advocates, and activists in the East Bay for the second annual Oakland Tech Week last week. We are grateful to our friends at MediaJustice and Upturn for inviting us co-present this all-day event, “Building Beyond Big Tech: Organizing Oakland’s Future”, on Sept....
L'autorité tchèque de protection des données (ÚOOÚ) a partagé ses perspectives sur plusieurs sujets clés du RGPD lors de la conférence "Journées de la Confidentialité" qui s'est tenue à Prague les 1er et 2 octobre.Le vice-président de l'ÚOOÚ, Petr Jäger, a abordé le modèle "consentir ou payer", indi...
L'Autorité de protection des données néerlandaise (AP) renforce sa préparation à la supervision de l'intelligence artificielle (IA) avec la création d'une nouvelle direction dédiée.La nouvelle Direction de la Surveillance et de la Coordination IA/Algorithmes (TCA) poursuivra les activités de surveil...
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword.
"Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communicatio...
L'Autorité de protection des données (APD) belge a communiqué le départ prochain du directeur de sa Chambre Contentieuse.Le directeur quittera ses fonctions le 31 décembre 2026. La procédure de remplacement sera initiée par la Chambre des représentants, qui publiera un appel à candidatures dans le M...
L'autorité estonienne de protection des données (Andmekaitse Inspektsioon, AKI) a rappelé les obligations des établissements scolaires concernant l'utilisation de l'intelligence artificielle et la protection des données des élèves.Lors d'une émission audio, une juriste de l'autorité a réitéré les po...
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, L...
Le Bureau du Commissaire à l'information (ICO) du Royaume-Uni alerte sur une augmentation record des plaintes relatives aux appels automatisés non sollicités, qui ont atteint leur plus haut niveau en cinq ans.L'autorité a constaté que le nombre de plaintes a presque triplé en trois mois, passant de...