> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Le FBI évoque un correctif non installé après le piratage revendiqué par ShinyHunters.
ASOS signale un possible accès aux données clients après une notification pirate. ZATAZ analyse les revendications.
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can aut...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure  UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX – A malicious...
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. [...]
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands th...
This is not so much a full post as it is an advertisement. I’ve been working with Claude and GPT 6 Astra to conduct a survey of historical cryptanalysis results, in an effort to determine how many human-hours have been spent attempting to cryptanalyze the problems we use in public-key encryption sch...
DDoS et démocratie : ZATAZ analyse les risques pour le vote, les revendications de NoName et le commerce de DDoS des pirates de ON.
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude...
Infogreffe visé par une revendication de fuite : un pirate évoque des profils et des secrets techniques sensibles.
Reconnaissance faciale partielle : une enquête OSINT révèle les risques d'identification des militaires masqués.
Several vulnerabilities have been discovered in vips, a fast image processing library. These vulnerabilities could result in denial of service, memory safety issues, or other security impact when processing specially crafted image files or data. For the stable distribution (trixie), these problems h...
Meanwhile, AI agents move robotic arms, 'make OT device operator screens lie'
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is...
Australian Cyber Aware's September 2026 review highlights major cybersecurity, privacy, AI, fraud, governance, risk and compliance developments affecting Australian organisations. This edition covers significant data breaches, ransomware claims, regulatory enforcement actions, audit findings, emerg...
L'assureur péruvien Interseguro a été mentionné dans une alerte de cybersécurité émanant du groupe de ransomware Direwolf, qui prétend avoir accédé à 2,5 téraoctets de données. Interseguro a confirmé l'accès non autorisé à des informations d'un groupe de clients, incluant potentiellement des documen...
Le groupe sud-africain The Foschini Group a signalé un incident de cybersécurité affectant ses opérations au Royaume-Uni, survenu le week-end du 11 ou 12 octobre 2026. L'incident a perturbé certains systèmes informatiques des marques Phase Eight, Hobbs et Whistles. L'entreprise a engagé des spéciali...
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.14-0+deb13u1. We recommend that you upgrade your tor packages.
Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluations and internal use. The cases involved real websites and real organizations outside the company. Anthropic...