> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
From the outside, when someone reaches CISO level, the move to the next role should be easy. After all, they’ve already made it to the top. But many security leaders find the opposite is true. Once they’re in a certain industry, it’s harder to get out.
Executives and recrui...
Updated product information in the Software Update table. This is an informational change only.
Près de 90 % des jeux conçus pour Windows sont aujourd’hui capables de tourner sur Linux. Mais, l'expérience est-elle au rendez-vous ? Voici ce que l'on sait.
The post 90 % des jeux Windows tournent désormais sur Linux : qu’en est-il de l’expérience ? first appeared on IT-Connect.
In this Help Net Security interview, Andree Noel, Deputy CISO at City of Toronto, discusses how the municipality strengthens its cyber defense by embedding security into strategic objectives and digital governance. She outlines the City’s approach to addressing evolving threats and modernizing legac...
A new study from cybersecurity firm Coveware shows that the ransomware economy is changing. Despite the increase in attacks, average ransom amounts and the percentage of organizations paying extortion demands is expected to decrease in 2025.
In the third quarter, only 23% o...
Une panne majeure a touché Azure et Microsoft 365 le 29 octobre 2025, rendant l’accès aux interfaces d’administration difficile pour de nombreux utilisateurs.
The post Panne Microsoft Azure et Microsoft 365 du 29 octobre 2025 : que s’est-il passé ? first appeared on IT-Connect.
A photo of someone’s face may be all an attacker needs to create a convincing synthetic voice. A new study from Australia’s national science agency explores this possibility, testing how well deepfake detectors perform against FOICE (Face-to-Voice), an attack attack method that generates speech from...
Notre partenaire GoDeal24 propose une nouvelle vente flash avec des prix très intéressants sur les licences Windows 11, Office 2021 et même Windows 10 LTSC.
The post GoDeal24 célèbre Halloween : profitez d’Office 2021 et Windows 11 à prix cassés ! first appeared on IT-Connect.
This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. Chekov: Open-source static code analysis tool Checkov is an open-source tool designed to help teams secure their cloud infrastructure and code....
78% of organizations were hit by an email breach in the past 12 months, according to the Email Security Breach Report 2025 by Barracuda. Phishing, impersonation, and account takeover continue to drive incidents that often lead to ransomware and data loss. Breaches are widespread and interconnected P...
This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The foll...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-12487.
SUSE has released SUSE Linux Enterprise Server (SLES) 16, calling it AI-ready and built for long-term use. The release marks the first major update in the Enterprise Server line in more than five years and signals a new direction for how Linux might integrate with AI tools in the future. A Linux bui...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-12488.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-12486.
This vulnerability allows remote attackers to create arbitrary files on affected installations of Netgate pfSense. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-12490.
This vulnerability allows local attackers to escalate privileges on affected installations of Alibaba Cloud Workspace Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7....
Even as attackers are growing ever more sophisticated in their methods, it seems there’s no point in messing with the tried-and-true.
According to cyber insurance company At-Bay’s 2025 InsurSec Rankings Report, email and remote access remain the most prominent cyber threat...
Basketball stars have allegedly joined forces with the mafia to fleece high-rollers in a poker scam involving hacked shufflers, covert cameras, and an X-ray card table.
Meanwhile, researchers have found they could poke around an FIA driver portal to pull up the personal details of Formula 1 megas...