> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
Une vulnérabilité a été découverte dans Microsoft Visual Studio Code. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
Le département de police de Milwaukee a subi un incident cybernétique qui a touché l'unité High Intensity Drug Trafficking Areas, une source a indiqué à la presse locale, marquant le dernier d'une décennie de problèmes de cybersécurité pour l'agence. L'incident a affecté les systèmes de l'unité, mai...
Enan Tech Private Limited a subi une attaque de ransomware le 21 novembre, entraînant une perte de données. La police des cybercrimes a enregistré une plainte le 26 novembre. L'attaque a été signalée par Abhishek Anigol, responsable de la protection des données de l'entreprise.
It's no secret that 2025 has given Americans plenty to protest about. But as news cameras showed protesters filling streets of cities across the country, law enforcement officers—including U.S. Border Patrol agents—were quietly watching those same streets through different lenses: Flock Safety autom...
Le conseil de santé MACT affirme son engagement à protéger la confidentialité des informations et informe qu’un incident informatique a entraîné un accès non autorisé à certains fichiers entre le 12 et le 20 novembre 2025. Dès la découverte de l’incident, MACT a sécurisé ses systèmes, mené une enquê...
DHJJ, Ltd. suffered a data security incident involving personal information, including names, addresses, dates of birth, and Social Security numbers. The incident occurred on November 21, 2025, and was discovered on February 13, 2026. Affected individuals were notified on March 19, 2026.
Company 'clearly delighted' with the outcome The US Securities and Exchange Commission (SEC) has abandoned the lawsuit it pursued against SolarWinds and its chief infosec officer for misleading investors about security practices that led to the 2020 SUNBURST attack.…
SitusAMC Holdings Corporation suffered a data breach where an unauthorized third party accessed certain systems within its information technology network, potentially exposing personal information of borrowers and non-borrowers. The breach occurred between November 13-21, 2025. SitusAMC is offering...
The Securities and Exchange Commission on Thursday dropped its case against SolarWinds and its chief information security officer over its handling of an alleged Russian cyberespionage campaign uncovered in 2020, an incident that penetrated at least nine federal agencies and hundreds of companies. T...
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.
The post Hundreds of Salesforce customers hit by yet another third-party vendor breach appeared first on CyberScoop.
Salesforce posted a message on its website saying an investigation revealed that the activity “may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection.”
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling.
The post NSO Group argues WhatsApp injunction threatens existence, future U.S. government work appeared first on CyberScoop.
Key Takeaways What is Unified AI Oversight? In today’s AI landscape, organizations face overlapping regulations, ethical expectations, and AI operational risks. Unified AI oversight is a single lens to manage AI systems while staying aligned with global rules, reducing blind spots and duplication. I...
Researchers disclosed a WhatsApp flaw that exposed 3.5B accounts. Meta has patched it to prevent this mass enumeration. A team of researchers at the University of Vienna found a WhatsApp flaw that could scrape 3.5 billion accounts. Meta has since patched the vulnerability to block this enumeration t...
We’re pleased to announce the availability of the latest sample security baseline from Landing Zone Accelerator on AWS (LZA)—the Universal Configuration. Developed from years of field experience with highly regulated customers including governments across the world, and in consultation with AWS Part...
ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file.
A federal prosecutor alleged that one defendant boasted that his father “had engaged in similar business for the Chinese Communist Party.”
In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records. The data was subsequently listed for sale on a hacking forum and included email addresses, names, usernames and in many cases, the user's city and country.
The report, which is based on an investigation begun by the Privacy and Civil Liberties Oversight Board (PCLOB) in 2017, provides an overview of what open-source information the FBI consults in such investigations.