[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2025-61260 — OpenAI Codex CLI: Command Injection via Project-Local Configuration
By: Isabel Mill & Oded Vanunu OpenAI Codex CLI is OpenAI’s command-line tool that brings AI model-backed reasoning into developer workflows. It can read, edit, and run code directly from the terminal, making it possible to interact with projects using natural language commands, automate tasks, a...
> InfoSec News Nuggets 12/01/2025
South Korean government declares emergency over Coupang cyber attack The South Korean government convened an emergency ministerial meeting after e-commerce giant Coupang disclosed a major cyber incident and large scale data theft affecting its customer base. Authorities have launched a broad investi...
> South Korea's answer to Amazon admits breach exposed 33.7M customers
Coupang confirms internationally routed intrusion compromised more than half of the country's population South Korean retail behemoth Coupang has admitted to a data breach that exposed the personal details of 33.7 million customers, turning the company's famed "Rocket Delivery" logistics empire into...
> Cybersecurity M&A Roundup: Cyber Giants Strengthen AI Security Offerings
November 2025 saw cybersecurity giants like Palo Alto Networks, Bugcrowd and Zscaler invest in AI-powered security solutions
> Banning VPNs
This is crazy. Lawmakers in several US states are contemplating banning VPNs, because
think of the children! As of this writing, Wisconsin lawmakers are escalating their war on privacy by targeting VPNs in the name of “protecting children” in A.B. 105/S.B. 130. It’s an age verification bill that req...
> Terra Security introduces continuous exploitability validation for CTEM programs
Terra Security announced new capabilities for security and engineering leaders seeking to operationalize Continuous Threat Exposure Management (CTEM), enabling them to determine whether newly disclosed vulnerabilities are exploitable in their own environments. Recent vulnerabilities discovered in ma...
> Data breach hits 'South Korea's Amazon,' potentially affecting 65% of country’s population
South Korean online retail giant Coupang apologized for a data breach that prompted an emergency meeting by senior government officials.
> ⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More
Hackers aren’t kicking down the door anymore. They just use the same tools we use every day — code packages, cloud accounts, email, chat, phones, and “trusted” partners — and turn them against us. One bad download can leak your keys. One weak vendor can expose many customers at once. One guest invit...
> Cryptomixer crypto laundering service taken down by law enforcement
German and Swiss law enforcement agencies have taken down Cryptomixer, an illegal cryptocurrency mixer service, and have confiscated over 25 million euros (approximately $29 million) in Bitcoin. The Cryptomixer seizure banner As part of Operation Olympia, and with support from the EU’s Europol and E...
> Korea’s Coupang says data breach exposed nearly 34M customers’ personal information
E-commerce company Coupang has confirmed a massive data breach affecting 33.7 million customer accounts in South Korea.
> Google deletes X post after getting caught using a ‘stolen’ AI recipe infographic
Google is facing backlash on X after a viral post for its NotebookLM appeared to use a food blogger's work without credit. [...]
> Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams
The AI browser wars are coming to a desktop near you, and you need to start worrying about their security challenges. For the last two decades, whether you used Chrome, Edge, or Firefox, the fundamental paradigm remained the same: a passive window through which a human user viewed and interacted wit...
> French Football Federation faces own-goal after club software data breach
Zut alors! Cybercrooks scored names, numbers, and license IDs The French Football Federation (FFF) has conceded that attackers broke into its member management software using a compromised account, scoring a match sheet's worth of player data in the process.

> Ermittler zerschlagen Plattform fĂŒr Online-GeldwĂ€sche
Im Zuge der Operation Olympia wurde die kriminelle Handelsplattform “cryptomixer.io” abgeschaltet.Bundeskriminalamt Ermittlern aus Deutschland und der Schweiz ist ein Schlag gegen Online-GeldwĂ€sche mit KryptowĂ€hrungen gelungen. Wie die Behörden mitteilten, wurde die Serverin...
> Linux : comment protéger son serveur avec Fail2ban ?
Apprenez à installer et configurer Fail2ban sur votre serveur Linux (Debian, Ubuntu, etc.), pour détecter et bloquer les adresses IP malveillantes. Le post Linux : comment protéger son serveur avec Fail2ban ? a été publié sur IT-Connect.
> Europol Takes Down Illegal Cryptocurrency Mixing Service
Europol, alongside Swiss and German authorities, dismantled the illegal cryptocurrency mixing service ‘Cryptomixer’
> CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack
CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack appeared first on SecurityWeek.
> Daren Greener, Managing Director, SYTECH
SYTECH Managing Director Daren Greener talks to Forensic Focus about examination thresholds, sentencing guidance, and why AI is increasingly shaping the working lives of forensic examiners.
> Emerging Android threat ‘Albiriox’ enables full On‑Device Fraud
Albiriox is new Android MaaS malware enabling on-device fraud and real-time control. It targets 400+ banking, fintech, crypto, and payment apps. Albiriox is a new Android malware sold under a malware-as-a-service model on Russian‑speaking cybercrime forums. It provides advanced capabilities for on-d...
> Australian Man Gets Seven Years for Running “Evil Twin” Wi-Fi
A Western Australia man will spend seven years behind bars after stealing intimate data via Wi-Fi