> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
Le Bureau du commissaire à l'information (ICO) a publié une décision de réprimande à l'encontre de Post Office Limited pour des manquements en lien avec la divulgation non autorisée d'informations personnelles appartenant à des centaines de victimes du scandale informatique Horizon.Cette affaire déb...
The private, for-profit University of Phoenix is the latest school to disclose that it suffered a data breach due to a vulnerability in Oracle's E-Business Suite.
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de GLOBAL COAST INVESTMENTS, S.L. (comprenant le prononcé d'une amende de 600 €) pour des manquements en lien avec le droit d'accès d'une personne concernée.Cette affaire débute par une pla...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une décision de sanction à l'encontre de la société AMERICAN EXPRESS CARTE FRANCE, comprenant le prononcé d'une amende de 1 500 000 €, pour des manquements liés au non-respect des règles applicables aux traceurs.Cette affaire...
A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully exploited, could result in remote code execution.
The vulnerability, tracked as CVE-2025-55182, carries a CVSS score of 10.0.
It allows "unauthenticated remote code execution by exploiting a fl...
Microsoft has silently plugged a security flaw that has been exploited by several threat actors since 2017 as part of the company's November 2025 Patch Tuesday updates, according to ACROS Security's 0patch.
The vulnerability in question is CVE-2025-9491 (CVSS score: 7.8/7.0), which has been describe...
Read the latest DFIR news – fresh insights on digital evidence handling, emerging AI and privacy challenges, new tools shaping modern investigations, and more.
Roskomnadzor, Russia's telecommunications watchdog, has blocked access to the Roblox online gaming platform for failing to stop the distribution of what it described as LGBT propaganda and extremist materials. [...]
On June 10th, 2025, we received a submission for a Remote Code Execution vulnerability in Sneeit Framework, a WordPress plugin with an estimated 1,700 active installations. The plugin is bundled in multiple premium themes. This vulnerability can be leveraged to execute code remotely.
The post Attack...
A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation in the wild.
The vulnerability, CVE-2025-8489 (CVSS score: 9.8), is a case of privilege escalation that allows unauthenticated attackers to grant themselves administrative priv...
Google is expanding support for its Android's in-call scam protection to multiple banks and financial applications in the United States. [...]
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead
Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to dete...
Ghostscript could be made to crash if it wrote certain files.
Microsoft has silently "mitigated"Â a high-severity Windows LNK vulnerability exploited by multiple state-backed and cybercrime hacking groups in zero-day attacks. [...]
A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia
The cameras, made by the police technology juggernaut Axon Enterprise, were deployed on a trial basis by as many as 50 officers on Wednesday, according to local news reports.
Some 2FA-phishing attacks are becoming significantly harder to spot as threat actors blend two previously distinct phishing-as-a-service (PhaaS) kits: Salty2FA and Tycoon2FA, into a single hybrid strain.
Researchers at Any.Run warn that the hybrid is already bypassing detec...
A new cyber defense service has prevented almost one billion early-stage cyber-attacks in the past year, British Security Minister claims
Salt Security announced it is extending its API behavioral threat protection to detect and block malicious intent targeting Model Context Protocol (MCP) servers deployed within the AWS ecosystem. Building on the recent launch of Salt’s MCP Finder technology, Salt now enables organizations to identif...
Earlier this year, one of the largest crypto exchanges in South Korea detected abnormal withdrawal activity from one of its…
The post $35 Million in Crypto Drained in 15 Minutes: How Exchange Hacks Are Evolving and How to Prevent Them appeared first on Chainalysis.