> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
No reports of active exploitation … yet Cisco patched a bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products that allows remote attackers with admin-level privileges to access sensitive information - and warned that a public, proof-of-concept exploit for th...
It was discovered that Tornado incorrectly handled special characters in
HTTP headers. An attacker could possibly use this issue to execute a cross-
site scripting (XSS) attack. This issue only affected Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10.
(CVE-2025-6...
Le Bureau du Commissaire à l'information (ICO) analyse, dans un nouveau rapport, les implications pour la protection des données de l'intelligence artificielle agentique, notamment dans le secteur du commerce.Le rapport "Futurs technologiques" du 8 janvier 2026 met en lumière l'intelligence artifici...
L'autorité polonaise de protection des données a dévoilé son plan de contrôles sectoriels pour l'année 2026, ciblant des domaines jugés problématiques en raison d'incidents, de plaintes et de notifications de violations.Les inspections prévues porteront sur cinq secteurs spécifiques. Premièrement, l...
Internet monitoring firms and experts say Iran’s internet has almost completely shut down, as protests spread through major cities.
Le Bureau du Commissaire à l'information (ICO) a conclu un protocole d'accord avec le Gouvernement de Sa Majesté visant à rehausser les normes en matière de protection des données au sein de l'administration.Signé le 8 janvier 2026, cet accord fait suite à plusieurs violations de données graves et m...
L'Autorité de protection des données a annoncé son programme de contrôles ciblés pour l'année 2026.Ces contrôles se dérouleront en deux phases. La première portera sur la sécurité du traitement conformément à l'article 32 du RGPD, ce qui inclut l'évaluation des risques et les obligations de document...
DataDome detected a 135% surge in malicious bot attacks during December 2025. Discover how AI-powered bots targeted retailers and how we defended customers
The post 135% Surge: Inside the Holiday Bot Attacks of December 2025 appeared first on Security Boulevard.
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) a aujourd'hui publié une décision de sanction à l'encontre de Money Seeds S.R.L. (comprenant le prononcé d'une amende de 15 178 lei, soit environ 2 983 €) pour des manquements en lien avec la prospection c...
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 8 janvier 2026, qui aborde plusieurs projets de délibérations et la présentation d'un programme de travail.
Partie I (avec débats): :
* Examen d’un projet de délibération p...
In my long career of safeguarding digital assets, I’ve seen technology shifts come and go, but nothing compares to the disruptive force of AI and large language models (LLMs). AI is quite literally a double-edged sword when it comes to cybersecurity. The same capabilities that...
The artificial intelligence juggernaut in a blog post encouraged its hundreds of millions of users to connect medical records and wellness app data to the new health-focused chatbot feature, adding that it will be outfitted with extra data privacy protections.
La bibliothèque jsPDF disponible sur NPM est affectée par une faille de sécurité critique : la CVE-2025-68428. Quels sont les risques ? Comment se protéger ?
Le post Cette faille critique dans jsPDF (CVE-2025-68428) peut exposer les données de votre serveur a été publié sur IT-Connect.
Here’s a scenario you’ve probably seen: A developer downloads a Model Context Protocol (MCP) server from GitHub, runs it locally, connects it to their chat client or agent workflow, authorizes with a Personal Access Token (PAT) that grants excessive permissions, and starts using it. It works great....
4 min readIt began, as an engineer’s attempt to fix a nagging problem often does, with irritation. Each night, automated test pipelines ran across an expanding surface area of the Aembit Workload IAM Platform, validating that core components behave as expected across environments. By morning, the...
Among the 66 international organizations the administration withdrew from are a handful that work on cybersecurity topics.
The post Trump pulls US out of international cyber orgs appeared first on CyberScoop.
Law enforcement has more tools than ever to track your movements and access your communications. Here’s how to protect your privacy if you plan to protest.
The security lapse exposed personal information belonging to residents who received state benefits.
The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL
Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil.
The campaign has been codenamed Boto Cor-de-Rosa by Acronis Threat Research Unit.
"The malware retrieves the victim...