[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (135 articles)

|

// AI-powered summary generated at 16:00

> As Capabilities Advance Quickly OpenAI Warns of High Cybersecurity Risk of Future AI Models  
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 19:10]
OpenAI warns that frontier AI models could escalate cyber threats, including zero-day exploits. Defense-in-depth, monitoring, and AI security by design are now essential. The post As Capabilities Advance Quickly OpenAI Warns of High Cybersecurity Risk of Future AI Models   appeared first on Securit...
> Sophos obtient ses meilleurs résultats lors de l’évaluation MITRE ATT&CK Enterprise 2025
[SOURCE] Naked Security [LANGUAGE: EN] [DATE: 2025-12-12 19:10]
Une étape majeure : Sophos XDR offre une couverture de détection à 100% selon la dernière évaluation ATT&CK.
> LW ROUNDTABLE Part 2: Mandates surge, guardrails lag — intel from the messy middle
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 19:06]
Regulators made their move in 2025. Disclosure deadlines arrived. AI rules took shape. Liability rose up the chain of command. But for security teams on the ground, the distance between policy and practice only grew wider. Part two of a … (more…) The post LW ROUNDTABLE Part 2: Mandates surge, guard...
> More than 340,000 impacted by cyberattack on library in large Washington county
[SOURCE] Recorded Future [LANGUAGE: EN] [DATE: 2025-12-12 19:05]
The Pierce County Library System published breach notifications this week on its website and with regulators in several states, detailing an incident first discovered in April.
> Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2025-12-12 18:50]
Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT. "These repositories, often themed as development utilities or OSINT tools, cont...
> Three New React Vulnerabilities Surface on the Heels of React2Shell
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 18:44]
CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779 require immediate attention The post Three New React Vulnerabilities Surface on the Heels of React2Shell appeared first on Security Boulevard.
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:41]
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du Club de golf Villa de Cuéllar, comprenant le prononcé d'une amende de 400 €, pour des manquements liés à l'information de ses salariés concernant l'installation d'un système de vidéosurveillance.Cet...
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:38]
L'Agence espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de TALENTO MOTOR S.L. (comprenant le prononcé d'une amende de 10 000 €) pour des manquements en lien avec l'envoi de communications commerciales par message texte.Cette affaire débute par u...
> Prompt Injection Can’t Be Fully Mitigated, NCSC Says Reduce Impact Instead 
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 18:36]
The NCSC warns prompt injection is fundamentally different from SQL injection. Organizations must shift from prevention to impact reduction and defense-in-depth for LLM security. The post Prompt Injection Can’t Be Fully Mitigated, NCSC Says Reduce Impact Instead  appeared first on Security Boulevar...
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:35]
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du parti politique local de Villanueva del Pardillo, comprenant le prononcé d'une amende de 500 €, pour des manquements en lien avec la publication d'une vidéo sur les réseaux sociaux.Cette affaire d...
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:33]
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de RETSINNAL GROUP, S.L.U. (comprenant le prononcé d'une amende de 1 000 €) pour des manquements en lien avec l'obligation d'information des personnes concernées.Cette affaire débute par un...
> Coupang data breach traced to ex-employee who retained system access
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2025-12-12 18:28]
A data breach at Coupang that exposed the information of 33.7 million customers has been tied to a former employee who retained access to internal systems after leaving the company. [...]
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:31]
L'Agence espagnole de protection des données (AEPD) a publié un document détaillant la mise en œuvre pratique de sa politique interne relative à l'utilisation de l'intelligence artificielle (IA) générative.Ce complément à la "Politique générale interne pour l'utilisation de l'IA générative" établit...
> AEPD - autorité espagnole
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:31]
L'autorité espagnole de protection des données a aujourd'hui publié une décision de sanction à l'encontre de l'Institut National de Cybersécurité d'Espagne (INCIBE), comprenant le prononcé d'une amende de 2 000 €, pour des manquements liés à la protection des données dès la conception et par défaut....
> New React vulns leak secrets, invite DoS attacks
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2025-12-12 18:23]
And the earlier React2Shell patch is vulnerable If you're running React Server Components, you just can't catch a break. In addition to already-reported flaws, newly discovered bugs allow attackers to hang vulnerable servers and potentially leak Server Function source code, so anyone using RSC or fr...
> PIPC - autorité coréenne
[SOURCE] Portail RGPD [LANGUAGE: FR] [DATE: 2025-12-12 18:29]
La Commission de Protection des Informations Personnelles (PIPC) de Corée du Sud a présenté son plan d'action pour 2026, axé sur une transition fondamentale de son approche de la protection des données pour favoriser une société de convergence basée sur l'intelligence artificielle (IA).Ce plan marqu...
> The US digital doxxing of H-1B applicants is a massive privacy misstep
[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2025-12-12 18:19]
By making social accounts public, the new policy exposes private data that attackers can use for targeting, impersonation, or extortion.
> Cyber Risk is Business Risk: Embedding Resilience into Corporate Strategy 
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 18:03]
To transform cyber risk into economic advantage, leaders must treat cyber as a board-level business risk and rehearse cross-border incidents with partners to build trust.  The post Cyber Risk is Business Risk: Embedding Resilience into Corporate Strategy  appeared first on Security Boulevard.
> A look at an Android ITW DNG exploit
[SOURCE] Project Zero [LANGUAGE: EN] [DATE: 2025-12-12 18:01]
 Posted by Benoît Sevens, Google Threat Intelligence GroupIntroductionBetween July 2024 and February 2025, 6 suspicious image files were uploaded to VirusTotal. Thanks to a lead from Meta, these samples came to the attention of Google Threat Intelligence Group.Investigation of these images showed th...
> Randall Munroe’s XKCD ‘EPIRBS’
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-12 18:00]
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘EPIRBS’ appeared first on Security Boulevard.