> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
Keeping websites and applications secure starts with knowing which vulnerabilities exist, how severe they are, and whether they affect your stack. That’s exactly where the CVE program shines. Below, we’ll cover some CVE fundamentals, including what they are, how to search and understand the data, an...
‘Bulletproof’ hosts partly dodged the last attack of this sort US, UK, Australia sanction Lockbit gang’s hosting provider ‘Bulletproof’ hosts partly dodged the last attack of this sort Cybercrime fighters in the US, UK, and Australia have imposed sanctions on several Russia-linked entities they clai...
In March 2023, the "AI-first global cloud platform" Vultr disclosed a security incident at a third-party vendor. Dating back to the previous year, the incident was attributed to the ActiveCampaign email marketing service provider and resulted in the exposure of 188k unique email addresses. A small n...
OpenAI has started rolling out GPT 5.1-Codex-Max on Codex with a better performance on coding tasks. [...]
Une vulnérabilité a été découverte dans GnuTLS. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Une vulnérabilité a été découverte dans les produits Kaspersky. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).
A recap of Datadog's awards from the 2025 Latio Cloud Security Market Report
De multiples vulnérabilités ont été découvertes dans Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans les produits SonicWall. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Le bureau du shérif du comté de Cleveland en Oklahoma a été victime d'une attaque de ransomware qui a touché certaines parties de son système informatique interne, mais n'a pas perturbé les services de sécurité publique. Les responsables ont indiqué que les services de sécurité publique n'ont pas ét...
La ville d'Attleboro a subi une faille de sécurité informatique qui a mis hors service plusieurs systèmes technologiques, y compris les lignes téléphoniques et les services de messagerie électronique. Les services de sécurité publique fonctionnent normalement et les résidents peuvent toujours appele...
Red Hat Lightspeed (formerly Red Hat Insights) has long helped operations teams detect risks, open tickets, and share findings with the right tools, connecting proactive intelligence to everyday workflows.Much has changed, not only in Red Hat Lightspeed itself, but also in how organizations are usin...
Le Kita-Betreiber berlinois Socius a été victime d'une attaque par ransomware le 20 novembre, au cours de laquelle 1% de ses données ont été copiées. L'entreprise gère six crèches à Berlin et prend soin de 3000 enfants et adolescents. Les conséquences de l'attaque sont encore inconnues.
Cyber-related activities of two Iran-linked threat actors played key roles in subsequent high-profile missile strikes, according to Amazon’s Threat Intel team, which sees the incidents as indicative of increased use of cyber operations in support of kinetic attacks.
“We bel...
New openvpn packages are available for Slackware 15.0 and -current to fix security issues.
Attackers may be joining the dots to enable unauthenticated RCE Fortinet has confirmed that another flaw in its FortiWeb web application firewall has been exploited as a zero-day and issued a patch, just days after disclosing a critical bug in the same product that attackers had found and abused a m...
Getting credentials for local development with AWS is now simpler and more secure. A new AWS Command Line Interface (AWS CLI) command, aws login, lets you start building immediately after signing up for AWS without creating and managing long-term access keys. You use the same sign-in method you alre...
Palo Alto Networks Inc. announced Wednesday it will acquire Chronosphere, a next-generation observability platform designed for artificial intelligence (AI) workloads, in a $3.35 billion deal combining cash and replacement equity awards. The acquisition, pending regulatory approval, is expected to...
Fortinet a corrigé une nouvelle faille zero-day dans FortiWeb : CVE-2025-58034. Cette faille est déjà exploitée par les pirates : voici comment se protéger.
The post Fortinet – CVE-2025-58034 : encore une faille zero-day dans FortiWeb ! first appeared on IT-Connect.
Every year, Black Friday drives a surge of online purchases—but it also opens the floodgates for fraud. While most conversations focus on phishing emails or sketchy websites, the real cybersecurity frontline for e-commerce lies behind the scenes: mobile apps. Developers, not consumers, hold th...