> TODAY'S SUMMARY (139 articles)
Today's cybersecurity landscape highlights a series of significant threats and vulnerabilities. A Malaysian national was indicted for involvement in a global scam operation, showcasing the expanding reach of cybercriminal networks. In Italy, a cyberattack on Parliament underscores the rising hybrid warfare risks and the need for robust defenses. AI-driven hacking is increasingly prevalent, with reports of a hacker utilizing AI to discover critical bugs in industrial control software and malicious bots automating attacks against organizations in Japan. Meanwhile, vulnerabilities in PHP and Brotli compression have been actively exploited, prompting urgent patching by organizations. Notably, a ransomware attack forced the University of New Mexico to divert ambulances, emphasizing the critical impact of cyber incidents on healthcare operations. As AI tools become more integrated into cyberattacks, organizations must enhance their security measures to combat these evolving threats.
|
// AI-powered summary generated at 20:00
OpenAI has parted ways with three safety researchers after an internal investigation found they mishandled sensitive company information, report says.
Operation KillSwitch: Europol says the KillSec ransomware group, allegedly led by a 16-year-old, was dismantled after attacks on about 1,000 victims. Law enforcement seized control of KillSec ‘s dark web leak site, the Tor website the group used to threaten victims with publishing stolen files unles...
In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.
Traverse barriers and checkpoints in the occupied West Bank—your choices reflect the reality of nearly 3.5 million Palestinians who live there.
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
The post Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks appeared first on SecurityWeek.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 154.0.8037.92-1~deb13u1.
RUSI wants procurement rethink that could put US suppliers under scrutiny too
Affaire Bardella / Mediapart : historiques des réseaux sociaux. Comment des archives Messenger peuvent étayer une enquête et ses vérifications.
Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures.
The post Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains appeared first on SecurityWeek.
More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.
La Commission de protection des informations personnelles (PIPC) sud-coréenne et le Ministère de l'Intérieur et de la Sécurité organisent un débat public sur la protection et l'utilisation des données personnelles à l'ère de l'intelligence artificielle (IA).Cet événement, intitulé "Forum pour tous",...
Le gouvernement sud-coréen, par l'intermédiaire de plusieurs ministères dont la Commission de protection des informations personnelles (PIPC), a annoncé un plan visant à renforcer la responsabilité en matière de cybersécurité dans le secteur public.Ce plan a été élaboré suite au constat que de récen...
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on its leak site unless they paid.
The 16-year-old was one of 3 people arrested on September 30, when...
Le Bureau du commissaire à l'information (ICO), l'autorité britannique de protection des données, a annoncé le déménagement de son siège social.Le 28 septembre 2026, le siège social de l'autorité a été transféré de Wilmslow vers le complexe Circle Square, situé dans le centre-ville de Manchester. La...
Le Bureau du Commissaire à l'information (ICO) a annoncé son adhésion au Programme des ambassadeurs nationaux du Groupe du Centre national de cyber-résilience (NCRCG) afin de renforcer la cyber-résilience au Royaume-Uni.Ce partenariat vise à sensibiliser les petites et moyennes entreprises (PME) aux...
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled
certain FLAC audio streams. An attacker could possibly use this issue to
obtain sensitive information. (CVE-2026-17072)
Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed
certain AVI files. An attacker cou...
L'autorité polonaise de protection des données (UODO) et l'Institut des assurances sociales (ZUS) ont organisé un séminaire le 24 septembre 2026 portant sur la responsabilité des administrations publiques dans la collecte, la conservation et le partage des données personnelles à l'ère du numérique.L...
La Commission Nationale de Protection des Données du Portugal (CNPD) et l'Agence Espagnole de Protection des Données (AEPD) ont convenu de renforcer leur coopération pour faire face aux défis de l'intelligence artificielle dans le domaine de la protection des données personnelles.Cet accord a été co...
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A model check can run code. A cache can mix up requests. A public secret can stay useful for years.
That is t...
L'Autorité hellénique de protection des données a communiqué sur l'augmentation significative de sa charge de travail due à la hausse des plaintes et a émis des recommandations pour leur soumission.L'autorité a enregistré 2 611 plaintes au cours des huit premiers mois de 2026, soit une augmentation...