> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
Aurora College a suspendu les cours pour au moins une semaine après une attaque informatique pendant les vacances. Les classes en personne et en ligne sont suspendues pour la semaine du 5 au 9 janvier. Le collège travaille à la remédiation et à la récupération de ses systèmes.
L'Universidad Nacional Autónoma de México a détecté et contenu une cyberattaque visant cinq de ses systèmes informatiques pendant la période de vacances d'hiver. L'institution a confirmé l'activation de protocoles de sécurité et l'absence de fuite de données suite à l'incident. La détection rapide e...
What Makes NHI Management a Crucial Component in Cybersecurity? Have you ever wondered why Non-Human Identity (NHI) management is a fundamental part of robust cybersecurity frameworks? With the increasing reliance on digital solutions across various industries, managing machine identities and their...
What Are Non-Human Identities (NHIs), and Why Are They Crucial in Today’s Cloud Environment? Where data breaches and cyber threats are escalating, how do organizations secure the growing infrastructure of machine identities, known as Non-Human Identities (NHIs)? Where organizations shift to cloud-ba...
This year, we fought back against the return of a terrible idea that hasn’t improved with age: site blocking laws.
More than a decade ago, Congress tried to pass SOPA and PIPA—two sweeping bills that would have allowed the government and copyright holders to quickly shut down entire websites based...
How Secure Are Non-Human Identities in Cloud Environments? Have you ever pondered the safety of machine identities within your organization’s cloud infrastructure? While we integrate more technology into our systems, managing Non-Human Identities (NHIs) becomes critical. These machine identities pla...
How Do Non-Human Identities Shape Our Approach to Cybersecurity? Are you aware of how machine identities are silently reshaping cybersecurity? With the rise of Non-Human Identities (NHIs), the traditional approach to cybersecurity needs a significant shift. These NHIs, such as machine identities, ar...
A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating 'fake glitches' on compromised websites to lure users into downloading payloads or following malicious instructions [...]
Coupang will spend about $1.17B to compensate 33.7 million users affected by a data breach, providing purchase vouchers to those impacted. Coupang announced it will spend about $1.17 billion to compensate 33.7 million people affected by a recent data breach, providing purchase vouchers to impacted u...
Palo Alto Networks will significantly expand the scope of the cybersecurity offerings it makes available on Google Cloud in the New Year while at the same time making greater use of cloud infrastructure and artificial intelligence (AI) technologies provided by Google across its portfolio. Specifica...
The Treasury Department on Tuesday took three people closely affiliated with the holding company behind Predator spyware off of a sanctions list, reversing their designation in 2024 by the Biden administration.
Firewall audit failures are not edge cases anymore. They are the norm. Across industries, nearly 60% of firewalls fail at least one high-severity check during audits and internal assessments. These...
The post Why 60% of Firewalls Fail High-Severity Checks and How NSPM Fixes It appeared first on Sec...
Session 7C: Secure Protocols
Authors, Creators & Presenters: Daniel J. Bernstein (University of Illinois at Chicago and Academia Sinica), Tanja Lange (Eindhoven University of Technology amd Academia Sinica), Jonathan Levin (Academia Sinica and Eindhoven University of Technology), Bo-Yin Yang (Ac...
You didn't think you'd get to enjoy your time off without a major cybersecurity incident, did you? A high-severity MongoDB Server vulnerability, for which proofs of concept emerged over Christmas week, is now under active exploitation, according to the US Cybersecurity and Infrastructure Security Ag...
Le Conseil d'État a partiellement annulé une délibération de la Commission nationale de l'informatique et des libertés (CNIL) et a réduit l'amende de 32 millions d'euros infligée à la société Amazon France Logistique (cf. notre fiche dédiée sur cette sanction).La société contestait une délibération...
Throughout 2025, EFF conducted groundbreaking investigations into Flock Safety's automated license plate reader (ALPR) network, revealing a system designed to enable mass surveillance and susceptible to grave abuses. Our research sparked state and federal investigations, drove landmark litigation, a...
Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT and DeepSeek and browser history. The incident is the latest in a growing string of attacks in which hackers weaponized browser extensions to exfiltrate huge amounts of sensit...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de NAROBESA INV, S.L. comprenant le prononcé d'une amende de 2 000 € pour des manquements liés à son obligation de coopération avec l'autorité de contrôle.Cette affaire débute par une plainte déposée a...
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) a publié une décision de sanction à l'encontre de Roumasport S.R.L, comprenant le prononcé d'une amende de 50 920 lei (10 000 €), pour des manquements en lien avec la sécurité des données personnelles.Cett...
You might not know it, given the many headlines focused on new questions about copyright and Generative AI, but the year’s biggest copyright case concerned an old-for-the-internet question: do ISPs have to be copyright cops? After years of litigation, that question is now squarely before the Supreme...