> TODAY'S SUMMARY (53 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A notable authentication bypass vulnerability (CVE-2026-102895) has been identified in GPUStack, raising concerns for users managing AI workloads. Notion has confirmed a data breach affecting chat transcripts linked to its Fireworks AI service, although the impact is limited. Additionally, hackers are exploiting vulnerabilities in ScreenConnect and deploying malware, while a significant number of GitHub repositories have been compromised with credential-stealing payloads. The UK’s NCSC has launched a Cyber Adversary Testing initiative to enhance organizational resilience. Meanwhile, Maersk is facing a $5 million extortion demand following a data breach. Organizations are urged to adopt a proactive security mindset, emphasizing mitigation over traditional patching strategies.
|
// AI-powered summary generated at 12:00
L'Agence espagnole de protection des données (AEPD) a publié une décision constatant une infraction de l'Agence d'État Conseil supérieur de la recherche scientifique (CSIC) pour des manquements liés à la mise en place d'un système de géolocalisation de véhicules.Cette affaire débute par une plainte...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Website Task Flowchart’ appeared first on Security Boulevard.
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise le cadre juridique applicable aux annuaires en ligne qui intègrent des systèmes de notation et de commentaires concernant les professionnels.La publication de données professionnelles dans de tels annuaires ne requiert pas syst...
Le Préposé fédéral allemand à la protection des données et à la liberté d'information (BfDI) a publié un guide intitulé "L'IA dans les administrations - Penser à la protection des données dès le départ", destiné aux organismes publics fédéraux.Ce document vise à aider les entités publiques à identif...
France’s data protection regulator has fined the software company Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach.
Ce tutoriel explique comment configurer la stratégie d'audit et les SACL pour savoir qui a accédé à quel fichier et à quelle heure sur un partage Windows.
Le post Serveurs de fichiers : configurer l’audit d’accès aux fichiers et dossiers sur Windows Server a été publié sur IT-Connect.
Trust Wallet says attackers who compromised its browser extension right before Christmas have drained approximately $7 million from nearly 3,000 cryptocurrency wallet addresses. [...]
It's no secret that digital surveillance and other tech-enabled oppressions are acute dangers for liberation movement workers. The rising tides of tech-fueled authoritarianism and hyper-surveillance are universal themes across the various threat models we consider. EFF's Surveillance Self-Defense pr...
EFF’s attorneys, activists, and technologists don’t just do the hard, endless work of defending our digital civil liberties — they also spend a lot of time and effort explaining that work to the public via media interviews.Â
EFF had thousands of media mentions in 2025, from the smallest hyperlocal o...
A recently disclosed vulnerability affecting MongoDB instances has been reportedly exploited in the wild. Exploit code has been released for this flaw dubbed MongoBleed.
Key takeaways:
MongoBleed is a memory leak vulnerability affecting multiple versions of MongoDB.Â
Exploitation of MongoDB has be...
Drone as first responder (DFR) adoption really took off in 2025. Though the concept has been around since 2018, this year saw more normalization of the technology, its integration into more real-time crime center structures, and the implementation of automated deployment of drones.
A DFR program fea...
NDSS 2025 - The Road To Trust: Building Enclaves Within Confidential VMs
Session 7B: Trusted Hardware and Execution
Authors, Creators & Presenters: Wenhao Wang (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS), Linke Song (Key Laboratory of Cyberspace Sec...
Situation de crise chez Ubisoft avec le jeu Rainbow Six Siege. Au-delà des perturbations in-game visibles par les joueurs, le piratage pourrait être massif.
Le post Chaos pour Rainbow Six Siege : entre la pluie de crédits et la menace d’une attaque d’ampleur a été publié sur IT-Connect.
It took Sax well over a year to complete its investigation after detecting hackers on its network.
The post Top US Accounting Firm Sax Discloses 2024 Data Breach Impacting 220,000 appeared first on SecurityWeek.
Most modernization failures do not happen because leaders ignore risk. They happen because risk is misunderstood. Manual legacy refactoring feels controlled because it relies on...Read More
The post Is GenAI-Powered Modernization Safer Than Manual Legacy Refactoring? appeared first on ISHIR | Custom...
Frequently asked questions about five vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively known as IngressNightmare.
Background
The Tenable Security Response Team (SRT) has compiled this blog to answer Frequently Asked Questions (FAQ) regarding IngressNightmare.
FAQ
What is...
OWASP's new Agentic AI Top 10 highlights real-world attacks already targeting autonomous AI systems, from goal hijacking to malicious MCP servers. Koi Security breaks down real-world incidents behind multiple categories, including two cases cited by OWASP, showing how agent tools and runtime behavio...
In 2026, the question isn’t whether Kubernetes wins – it already has. And yet, many organizations are running mission-critical workloads on a platform they still treat as plumbing, not the operating layer that controls speed, security, and efficiency. Recent Cloud Native Computing Foundation (...
OpenAI is rolling out an update to ChatGPT on mobile that finally allows you to select the Thinking time toggle, also called "juice" of the model. [...]
Korean Air employee discloses a data breach after a hack of its catering and duty-free supplier, KC&D, affecting thousands of staff. Korean Air suffered a data breach after its in-flight catering supplier Korean Air Catering & Duty-Free (KC&D) was hacked, exposing personal data of ~30,00...