> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape is marked by several significant threats and trends. A sophisticated North Korean hacking group has used fake employment schemes to execute a record $6.4 billion theft from Binance, highlighting the dangers of social engineering. UK officials have warned of imminent AI-powered ransomware attacks targeting critical infrastructure, predicting a surge in such incidents by 2028. Additionally, enterprises face financial losses of up to $1 million per day from LLMjacking attacks that exploit large language models for unauthorized cloud resource usage. Meanwhile, Google dismantled a massive botnet of 1.3 million Android TV boxes that was involved in ad fraud. Lastly, multiple vulnerabilities have been discovered across various platforms, including critical flaws in Node-RED and Siemens devices, necessitating immediate attention from IT security teams.
|
// AI-powered summary generated at 20:00
L'Autorité de protection des données (APD) belge a communiqué le départ prochain du directeur de sa Chambre Contentieuse.Le directeur quittera ses fonctions le 31 décembre 2026. La procédure de remplacement sera initiée par la Chambre des représentants, qui publiera un appel à candidatures dans le M...
L'autorité estonienne de protection des données (Andmekaitse Inspektsioon, AKI) a rappelé les obligations des établissements scolaires concernant l'utilisation de l'intelligence artificielle et la protection des données des élèves.Lors d'une émission audio, une juriste de l'autorité a réitéré les po...
EFF was thrilled to join organizers, advocates, and activists in the East Bay for the second annual Oakland Tech Week last week. We are grateful to our friends at MediaJustice and Upturn for inviting us co-present this all-day event, “Building Beyond Big Tech: Organizing Oakland’s Future”, on Sept....
Le Bureau du Commissaire à l'information (ICO) du Royaume-Uni alerte sur une augmentation record des plaintes relatives aux appels automatisés non sollicités, qui ont atteint leur plus haut niveau en cinq ans.L'autorité a constaté que le nombre de plaintes a presque triplé en trois mois, passant de...
L'Autorité de protection des données (APD) belge a publié son Plan de gestion 2027, détaillant ses priorités stratégiques et ses objectifs opérationnels.Ce plan traduit les orientations du Plan Stratégique 2026-2028 en objectifs concrets pour 2026, visant un impact maximal avec des moyens limités. P...
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword.
"Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communicatio...
L'Autorité danoise de protection des données a jugé qu'un employeur pouvait légitimement refuser une demande d'accès d'un ancien employé, car les données demandées faisaient l'objet de procédures judiciaires en cours, constituant un intérêt privé et public prépondérant justifiant une dérogation au d...
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, L...
Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, was a principal of Your Mule Cashout, or “YMCO,” which from 2007 until 2014 set up a sophisticated network of mules in the U.S. and Europe.
A company known for wearable cardiac sensors, iRhythm, has begun notifying states of the impact of a data breach from the summer.
Attackers are increasingly ditching ransomware in favor of stealing company data and threatening to leak it. Let’s look at why this is happening and how businesses can protect themselves.
Hackers stole ASOS customer data in a cyberattack that addressed customers directly. Here's how this changes your approach to business security.
The owner of a ransomware remediation company is facing trial for defrauding customers.
Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company,...
“We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate," FBI Director Kash Patel said.
Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. [...]
OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor issues compared to previous alignment reports and notices covering its attacks on Hugging Face, Rubygems, and a G...
Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis
The Belarusian Cyber Partisans concurred with Russian research that they indeed spent months inside the network for the Moscow Department of Health.
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China's state-sponsored hacking group, Hafnium.
Read more in my article on the Hot for Security blog.
For the third week running, Citrix has issued a critical security warning to customers managing their own NetScaler ADC and Netscaler Gateway instances, this time warning of a memory overflow vulnerability enabling denial of service or remote code execution.
This week’s vul...