Tufin has announced the availability of Tufin Orchestration Suite (TOS) 5.3, helping enterprises further simplify security operations and maintain consistent control across increasingly complex multi-vendor, hybrid environments. As enterprise security environments continue to expand across cloud, fi...
CoSnitch (CVE-2026-24301) : un clic suffisait pour que Copilot exfiltre vos e-mails. Et c'est l'IA elle-même qui a livré la faille aux chercheurs.
Le post CoSnitch : Copilot a lui-même livré la faille qui permet de voler vos données a été publié sur IT-Connect.
The U.S. has charged 17 alleged members of Mabna Institute, an Iranian hacking-for-hire company accused of running a years-long campaign that stole data from American universities, companies, and government agencies.
The post US charges 17 Iranian hackers over 31-terabyte academic data theft appeare...
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed StopAndProtect, that has turned thousands of hacked WordPress websites into a shared platform...
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
The post Hackers Using AI to Target Siemens PLCs in Critical US Sectors appeared first on SecurityWeek.
Firefox 154 étend les protections du réseau local aux WebSockets, corrige 58 failles et ajoute le support de GeForce NOW pour jouer dans votre navigateur.
Le post Firefox 154 est disponible : WebSockets sous contrôle, GeForce NOW et 58 failles corrigées a été publié sur IT-Connect.
Fortunately, the company had a policy of checking source code on GitHub first
Microsoft is investigating a potential issue with the August 2026 updates that may prevent some games from launching or cause them to crash on affected Windows 11 systems. [...]
Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution.
The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of u...
Online fraud has become a routine concern for consumers and businesses that rely on digital accounts, payments and customer service. Experian’s 2026 U.S. Identity & Fraud Report describes a market where scams extend across messages, websites, documents, voices, images and account activity. Secur...
Airlock Digital, a global provider of application control and allowlisting solutions, today announced that it has completed an independent Information Security Registered Assessors Program (IRAP) assessment at the PROTECTED classification level.Â
The assessment was conducte...
New Mozilla Firefox packages for Slackware 15.0 and -current address security vulnerabilities, offering significant updates and improvements along with detailed change logs and installation instructions.
New mozilla-thunderbird packages have been released for Slackware 15.0 and -current, addressing various security issues and requiring an upgrade by users.
A team from the University of Massachusetts Amherst has shown that a contactless credit card keeps working past its printed expiration date, even after the cardholder gets a replacement. They named it the Zombie Card attack and presented the findings at USENIX Security 2026. The question behind the...
The window for responding to newly disclosed security flaws is getting shorter. Exploit code can appear quickly, exploitability can be tested soon after disclosure, and organizations have a growing number of weaknesses to sort through. Rapid7’s Q2 2026 Threat Landscape Report counted 8,539 high- and...
ChatGPT is experiencing a major outage, and users are unable to sign in, create accounts, or load chats, including previous conversations. [...]
OpenAI this week announced multiple moves designed to counter negative perceptions of its security and privacy, saying it had slowed its pace of scaling, implemented a two-week pause in reinforcement learning, and will be offering zero data retention for “eligible API customer...
Le groupe de cybercriminels xpl0itrs affirme avoir compromis l'infrastructure de Gruppo Spaggiari Parma, un fournisseur technologique majeur du système éducatif italien. Cette intrusion aurait permis le vol de 6,1 Téraoctets de données provenant de plus de 3 000 établissements scolaires. Les données...