> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclosure of privilege escalation. For the stable distribution (trixie), this problem has been fixed in version 2:27.0.0-3+deb13u6.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital sign...
Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu’s parent company Canonical spent part of last week fighting off a sustained distributed denial of service (DDoS) attack, the second one to hi...
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]
The acquisition pairs Elisity's zero-trust access controls with IonQ's post-quantum cryptography business as federal agencies and major companies accelerate timelines for quantum-ready encryption.
The post IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion appeared fir...
On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of 9.8 out of 10. A crafted P...
If you run a website, you’ve already met encryption even if you’ve never used the word. It’s the 🔒 padlock in the browser bar, the reason your host told you to stop using plain FTP, and the checkbox on your backup settings that says “encrypt archive.”
Encryption is one of the few security controls...
L'autorité croate de protection des données, l'Agence pour la protection des données personnelles (AZOP), a publié les résultats d'une enquête sur l'utilisation de l'intelligence artificielle générative par les établissements d'enseignement supérieur.L'enquête, menée auprès de 111 établissements en...
L’organisation noyb a publié une analyse classant les députés du Parlement européen selon leur positionnement sur la protection des données, dans le cadre du projet de modification du RGPD et de la directive « e-vie privée » connu sous le nom de Omnibus numérique.L'analyse, portant sur plus de 1 000...
Pew Research Center finds 51% of Americans say no, cite lack of interest - not know-how - as the top reason
L'autorité polonaise de protection des données (UODO), en collaboration avec la Chambre suprême des médecins, a organisé une formation pour les directeurs d'établissements médicaux sur les enjeux pratiques de la protection des données, dans un contexte de recrudescence des cyberattaques visant le se...
L'envoi de communications promotionnelles à des adresses de messagerie électronique certifiée, extraites de registres professionnels publics, constitue un traitement de données illicite en l'absence de consentement préalable des personnes concernées, la finalité de ces registres n'étant pas commerci...