[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Top Senate Intel Dem warns of ‘catastrophic’ cyber consequences of Trump admin national security firings, politicization
Sen. Mark Warner, D-Va., said the Trump administration is leaving the nation vulnerable at a time of rising threats in cyberspace. The post Top Senate Intel Dem warns of ‘catastrophic’ cyber consequences of Trump admin national security firings, politicization appeared first on CyberScoop.
> APD - autorité belge
La Chambre Contentieuse de l'Autorité de protection des données (APD) a prononcé une réprimande à l'encontre d'une commune pour manquement à ses obligations de responsable du traitement, suite à des consultations illicites de données du Registre national par ses agents.L'affaire trouve son origine d...
> AP - autorité néerlandaise
L'Autorité de protection des données néerlandaise (AP) a pris position sur la proposition Omnibus de la Commission européenne, qui vise à modifier plusieurs législations, dont le RGPD et le RÚglement sur l'intelligence artificielle (IA), dans un but de simplification de la réglementation numérique.L...
> Ubuntu 25.10: cups-filters Critical Denial Of Service Issues USN-7878-1
Several security issues were fixed in cups-filters.
> Ubuntu 25.10: libcupsfilters Critical Vulnerabilities RCE USN-7877-1
Several security issues were fixed in libcupsfilters.
> Techstrong Group and DigiCert Unveil the “Quantum Security 25” to Spotlight Leaders Shaping the Future of Quantum Security
Inaugural awards celebrate the pioneers turning quantum’s promise into real-world impact, bridging theory and practice in the next era of secure computing  Boca Raton, FL, November 20, 2025 — Techstrong Group, in collaboration with DigiCert, today announced the launch of Quantum Security 25, a new...
> USN-7876-1: ImageMagick vulnerability
It was discovered that ImageMagick did not properly handle memory when encoding BMP images. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue exists due to an incomplete fix for CVE-2025-57803.
> PowerToys 0.96 : Advanced Paste évolue pour se connecter aux IA Cloud et locales
PowerToys 0.96 permet à l'outil Advanced Paste de se connecter à une IA Cloud ou une IA locale, y compris via Ollama. Voici un récapitulatif sur les nouveautés. The post PowerToys 0.96 : Advanced Paste évolue pour se connecter aux IA Cloud et locales first appeared on IT-Connect.
> WhatsApp compromise leads to Astaroth deployment
Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence
> New Android malware can capture private messages, researchers warn
The malware can monitor everything displayed on a phone in real time — including contacts, full message threads and the content of encrypted chats — by accessing data after it has been decrypted by legitimate apps.
> ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet
Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence (AI) framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0, is an evolution o...
> UK’s new cybersecurity bill takes aim at ransomware gangs and state-backed hackers
After years of delays, the UK government has finally introduced landmark cybersecurity legislation that could reshape how British organisations defend against digital attacks. Read more in my article on the Fortra blog.
> GlobalProtect VPN portals probed with 2.3 million scan sessions
A major spike in malicious scanning against Palo Alto Networks GlobalProtect portals has been detected, starting on November 14, 2025. [...]
> How to update CRLs without public access using AWS Private CA
Certificates and the hierarchy of trust they create are the backbone of a secure infrastructure. AWS Private Certificate Authority is a highly available certificate authority (CA) that you can use to create private CA hierarchies, secure your applications and devices with private certificates, and m...
> Débuter avec Traefik : un reverse proxy moderne pour vos services Web Docker
Tutoriel complet pour installer et configurer Traefik : un reverse proxy moderne pour exposer vos services Web exécutés sur des conteneurs Docker. The post Débuter avec Traefik : un reverse proxy moderne pour vos services Web Docker first appeared on IT-Connect.
> Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experienc...
> FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches
The Republican-led FCC voted to remove cybersecurity rules for telecom companies that were put in place before Donald Trump's inauguration as a response to 2024 breaches attributed to state-backed Chinese hackers.
> Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control (C2) server, Kaspersky researcher Lisandro Ubiedo said in an a...
> Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)
Searchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.
> Salesforce investigates customer data theft via Gainsight breach
Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers. [...]