[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Russia limits WhatsApp use, claiming it enables terrorism, crime, espionage
Russian users of WhatsApp reported disruptions as authorities limited access to the app, which they said enabled fraud, terrorism and possibly a recent leak of diplomatic communications with the U.S.
> Facial Recognition’s Trust Problem
Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed. The post Facial Recognition’s Trust Problem appeared first on SecurityWeek.
> Contagious Interview attackers go ‘full stack’ to fool developers
Researchers at Socket have uncovered more details of a sophisticated software supply-chain operation linked to the Contagious Interview campaign attacking developers who rely on packages from NPM. They report finding a “full stack” operation behind the attacks, where code h...
> South Korea's Coupang Confirms 34 Million Customer Data Leak
The South Korean police are tracking the suspect behind a cyber-attack targeting e-commerce giant Coupang
> $29 Million Worth of Bitcoin Seized in Cryptomixer Takedown
Cryptomixer was targeted by law enforcement in Operation Olympia for facilitating cybercrime and money laundering.  The post $29 Million Worth of Bitcoin Seized in Cryptomixer Takedown appeared first on SecurityWeek.
> New Android malware lets criminals control your phone and drain your bank account
Albiriox now targets over 400 financial apps and lets criminals operate your phone almost exactly as if it were in their hands.
> When Hackers Wear Suits: Protecting Your Team from Insider Cyber Threats
Hackers impersonate IT pros with deepfakes, fake resumes, and stolen identities, turning hiring pipelines into insider threats. Huntres sLabs explains how stronger vetting and access controls help stop these threats. [...]
> The CISO’s paradox: Enabling innovation while managing risk
We can keep it real here. One of the main jobs CISOs have is to stop being the “Department of No.” We have to figure out how to enable the rapid delivery of products and services for the business without introducing risks to the same business. That’s the paradox in a nutshe...
> ShadyPanda browser extensions amass 4.3M installs in malicious campaign
A long-running malware operation known as "ShadyPanda" has amassed over 4.3 million installations of seemingly legitimate Chrome and Edge browser extensions that evolved into malware. [...]
> Malware Manipulates AI Detection in Latest npm Package Breach
Malicious npm package targets AI security with misleading prompts, exploiting automated analysis
> Dutch study finds teen cybercrime is mostly just a phase
Only a select few continue into later life, mainly for the love of the game Young threat actors may be rebels without a cause. These cybercriminals typically grow out of their offending ways by the time they turn 20, according to data published by the Dutch government.…
> Ubuntu: GNU Binutils Important DoS Code Exec Issues USN-7899-1
Several security issues were fixed in GNU binutils.
> USN-7902-1: CRaC JDK 25 vulnerabilities
Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-53057) Darius Bohni discovered that the JA...
> USN-7901-1: CRaC JDK 21 vulnerabilities
Jinfeng Guo discovered that the Security component of CRaC JDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-53057) Darius Bohni discovered that the JA...
> New Albiriox Android Malware Developed by Russian Cybercriminals
Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month. The post New Albiriox Android Malware Developed by Russian Cybercriminals appeared first on SecurityWeek.
> USN-7900-1: CRaC JDK 17 vulnerabilities
Jinfeng Guo discovered that the Security component of CRaC JDK 17 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-53057) Darius Bohni discovered that the JA...
> USN-7899-1: GNU binutils vulnerabilities
It was discovered that GNU binutils could be forced to perform an out- of-bounds read in certain instances. An attacker with local access to a system could possibly use this issue to cause a denial of service. (CVE-2025-11839, CVE-2025-11840) It was discovered that GNU binutils incorrectly handled...
> Bug Windows 11 : l’icône de connexion par mot de passe disparaît de l’écran de verrouillage
Sur Windows 11, le bouton de connexion par mot de passe, permettant de s'authentifier avec un mot de passe plutôt qu'un code PIN, ne s'affiche plus. Le post Bug Windows 11 : l’icône de connexion par mot de passe disparaît de l’écran de verrouillage a été publié sur IT-Connect.
> Malwarebytes joins Global Anti-Scam Alliance (GASA) as supporting member 
Scams are sneakier, more direct, and harder to spot than ever, so we're proud to work with GASA to help keep people safer online.
> Flock Uses Overseas Gig Workers to Build Its Surveillance AI
An accidental leak revealed that Flock, which has cameras in thousands of US communities, is using workers in the Philippines to review and classify footage.