> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
Session 5D: Side Channels 1
Authors, Creators & Presenters: Lukas Maar (Graz University of Technology), Jonas Juffinger (Graz University of Technology), Thomas Steinbauer (Graz University of Technology), Daniel Gruss (Graz University of Technology), Stefan Mangard (Graz University of Technolo...
The billboards, located near Toronto’s Union Station, reportedly analyze only the age and gender of people nearby, according to their owner.
MCP is transforming AI agent connectivity, but authentication is the critical gap. Learn about Shadow IT risks, enterprise requirements, and solutions.
The post What Tech Leaders Need to Know About MCP Authentication in 2025 appeared first on Security Boulevard.
In a nod to the evolving threat landscape that comes with cloud computing and AI and the growing supply chain threats, Microsoft is broadening its bug bounty program to reward researchers who uncover threats to its users that come from third-party code, like commercial and open source software,
Th...
Une étape majeure : Sophos XDR offre une couverture de détection à 100% selon la dernière évaluation ATT&CK.
Israeli cybersecurity firms raised $4.4B in 2025 as funding rounds jumped 46%. Record seed and Series A activity signals a maturing, globally dominant cyber ecosystem.
The post Funding of Israeli Cybersecurity Soars to Record Levels appeared first on Security Boulevard.
OpenAI warns that frontier AI models could escalate cyber threats, including zero-day exploits. Defense-in-depth, monitoring, and AI security by design are now essential.
The post As Capabilities Advance Quickly OpenAI Warns of High Cybersecurity Risk of Future AI Models  appeared first on Securit...
The Pierce County Library System published breach notifications this week on its website and with regulators in several states, detailing an incident first discovered in April.
Regulators made their move in 2025.
Disclosure deadlines arrived. AI rules took shape. Liability rose up the chain of command. But for security teams on the ground, the distance between policy and practice only grew wider.
Part two of a … (more…)
The post LW ROUNDTABLE Part 2: Mandates surge, guard...
Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT.
"These repositories, often themed as development utilities or OSINT tools, cont...
CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779 require immediate attention
The post Three New React Vulnerabilities Surface on the Heels of React2Shell appeared first on Security Boulevard.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du Club de golf Villa de Cuéllar, comprenant le prononcé d'une amende de 400 €, pour des manquements liés à l'information de ses salariés concernant l'installation d'un système de vidéosurveillance.Cet...
L'Agence espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de TALENTO MOTOR S.L. (comprenant le prononcé d'une amende de 10 000 €) pour des manquements en lien avec l'envoi de communications commerciales par message texte.Cette affaire débute par u...
The NCSC warns prompt injection is fundamentally different from SQL injection. Organizations must shift from prevention to impact reduction and defense-in-depth for LLM security.
The post Prompt Injection Can’t Be Fully Mitigated, NCSC Says Reduce Impact Instead appeared first on Security Boulevar...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du parti politique local de Villanueva del Pardillo, comprenant le prononcé d'une amende de 500 €, pour des manquements en lien avec la publication d'une vidéo sur les réseaux sociaux.Cette affaire d...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de RETSINNAL GROUP, S.L.U. (comprenant le prononcé d'une amende de 1 000 €) pour des manquements en lien avec l'obligation d'information des personnes concernées.Cette affaire débute par un...
A data breach at Coupang that exposed the information of 33.7 million customers has been tied to a former employee who retained access to internal systems after leaving the company. [...]
L'Agence espagnole de protection des données (AEPD) a publié un document détaillant la mise en œuvre pratique de sa politique interne relative à l'utilisation de l'intelligence artificielle (IA) générative.Ce complément à la "Politique générale interne pour l'utilisation de l'IA générative" établit...
L'autorité espagnole de protection des données a aujourd'hui publié une décision de sanction à l'encontre de l'Institut National de Cybersécurité d'Espagne (INCIBE), comprenant le prononcé d'une amende de 2 000 €, pour des manquements liés à la protection des données dès la conception et par défaut....
And the earlier React2Shell patch is vulnerable If you're running React Server Components, you just can't catch a break. In addition to already-reported flaws, newly discovered bugs allow attackers to hang vulnerable servers and potentially leak Server Function source code, so anyone using RSC or fr...