> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Cybercriminals are increasingly targeting everyday users with spyware, indicating a shift towards more indiscriminate attacks. Additionally, vulnerabilities in widely used platforms like SAP and Google Chrome have been actively exploited, with SAP releasing critical patches for multiple flaws. The Russian state-linked Turla group continues to pose a threat, using advanced tools like "Cereal" to intercept emails from government servers. Meanwhile, supply chain attacks remain a concern, evidenced by the recent Qubole incident, which compromised numerous organizations' credentials. Overall, the rise in cloud vulnerabilities and the exploitation of AI in cyberattacks are emerging as critical areas for organizations to address.
|
// AI-powered summary generated at 16:00
The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data. A compromised account allowed attackers to breach the French Soccer Federation (FFF), stealing data belonging to its members. The organization confirmed the cyberattack on Thursd...
Élargir le choix offert aux clients et rapprocher Sophos Central des clients et partenaires à travers le Moyen-Orient.
A meter-long flying neon squid (Ommastrephes bartramii) was found dead on an Israeli beach. The species is rare in the Mediterranean.
The Cybersecurity Coalition, an industry group of almost a dozen vendors, is urging the Trump Administration and Congress now that the government shutdown is over to take a number of steps to strengthen the country's cybersecurity posture as China, Russia, and other foreign adversaries accelerate t...
A 44-year-old man was sentenced to seven years and four months in prison for operating an "evil twin" WiFi network to steal the data of unsuspecting travelers at various airports across Australia. [...]
We have been receiving inquiries about the Chainalysis metrics cited in a recent Binance announcement and blog. To clarify: This…
The post Clarifying Recent Binance Communications appeared first on Chainalysis.
Microsoft warned users that Windows 11 updates released since August may cause the password sign-in option to disappear from the lock screen options, even though the button remains functional. [...]
After scanning all 5.6 million public repositories on GitLab Cloud, a security engineer discovered more than 17,000 exposed secrets across over 2,800Â unique domains. [...]
USN-7894-1 introduced a regression in EDK II
La Chambre des litiges de l'Autorité de protection des données belge a prononcé des réprimandes à l'encontre d'un ancien employeur et d'un employeur potentiel pour des manquements liés à la vérification de références et au traitement d'une demande de droit d'accès.Un ancien employeur, Y1, a été répr...
Le Black Friday 2025, c'est en ce moment même : voici une sélection de bons plans sur du matériel informatique, entre mini PC, accessoires, disque SSD, etc.
Le post Le Black Friday 2025 c’est maintenant : les bons plans sur le matos informatique a été publié sur IT-Connect.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'un particulier, comprenant le prononcé d'une amende de 600 €, pour des manquements en lien avec son système de vidéosurveillance.Cette affaire débute par une plainte déposée par une voisine, signalan...
L'Autorité espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de OVH HISPANO, S.L.U. (comprenant le prononcé d'une amende de 72 000 €) pour des manquements en lien avec la sécurité des données personnelles.Cette affaire débute par une plainte déposé...
The company said the compromised information includes names, gender, addresses and phone numbers, but not credit-card details.
Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index (PyPI) via a domain takeover attack.
Software supply chain security company ReversingLabs said it found the "vulnerability...
Automation flaw in CI/CD workflow let a bad pull request unleash worm into npm PostHog says the Shai-Hulud 2.0 npm worm compromise was "the largest and most impactful security incident" it's ever experienced after attackers slipped malicious releases into its JavaScript SDKs and tried to auto-loot d...
The North Korean threat actors behind the Contagious Interview campaign have continued to flood the npm registry with 197 more malicious packages since last month.
According to Socket, these packages have been downloaded over 31,000 times, and are designed to deliver a variant of OtterCookie that br...
The French Football Federation (FFF) disclosed a data breach on Friday after attackers used a compromised account to gain access to administrative management software used by football clubs. [...]
Crims claim to know which customers are marked 'vulnerable' British telco Brsk is investigating claims that it was attacked by cybercriminals who made off with more than 230,000 files.…
Le 24 novembre 2025, Microsoft a annoncé la prise en charge de l'authentification Entra ID pour les connexions RDP avec Azure Bastion, le bastion Cloud.
Le post Azure Bastion prend désormais en charge l’authentification Entra ID pour les connexions RDP a été publié sur IT-Connect.