> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers at Asymmetric Security spent 48 hours over the last weekend reconstructing reported rogue OpenAI AI agent activity that hit the Australian governme...
Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal customers, accordin...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known Exp...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8),...
When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy of that evidence off the device. Existing users will receive a notification when...
GLPI 11.0.10 et GLPI 10.0.28 corrigent 8 failles, dont une injection SQL. Teclib' annonce aussi que GLPI 10.0.28 sera la derniĂšre version de la branche 10.
Le post GLPI 11.0.10 et GLPI 10.0.28 : 8 failles patchées et la fin annoncée de GLPI 10 a été publié sur IT-Connect.
TeamViewer a corrigé cinq failles dans ses clients Windows, Linux et macOS, dont une exploitable à distance (CVSS 8,8 sur 10). Voici les versions à installer.
Le post TeamViewer a corrigé 5 failles de sécurité, dont une exploitable à distance a été publié sur IT-Connect.
Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in 71 countries between May and July 2026. Half of the security and technology executives among them ranked such attacks in their...
IT teams responsible for identity security are concerned about AI agentsâ ongoing access to company systems and the actions they take on usersâ behalf, according to a Delineaâs 2026 Identity Security Report: The AI Enforcement Gap. âWritten policy is only as good as your ability to enforce it at the...
Hereâs a look at the most interesting products from the past week, featuring releases from BlackFog, Genea, Vega, and Thales. Vega II brings security-trained AI and lasting memory to the SOC Vega has introduced Vega II, its biggest platform release since emerging from stealth. The update brings fron...
Le CERT SantĂ© et le CERT-FR assurent le traitement des vulnĂ©rabilitĂ©s qui leur sont signalĂ©es par des tiers. A ce titre, ils accompagnent les Ă©diteurs affectĂ©s dans la conception et le suivi de plan dâaction incluant le dĂ©veloppement de correctifs et la communication vers leurs utilisateurs. Dans...
L'Institute of American Indian Arts (IAIA) a été perturbé par un incident présumé de cybersécurité, entraßnant une fermeture d'urgence du campus le 8 octobre. Les problÚmes de réseau, qui ont débuté le 2 octobre, ont rendu les outils numériques et la plateforme d'apprentissage Canvas indisponibles....
La Green Clinic, situĂ©e Ă Ruston, Louisiane, a Ă©tĂ© victime d'une cyberattaque qui a perturbĂ© les soins. Les systĂšmes sont tombĂ©s le vendredi, empĂȘchant le personnel d'accĂ©der aux dossiers des patients et aux plannings. Bien que des sources non identifiĂ©es aient attribuĂ© l'incident au groupe Wallstre...
In part 1 of this series, we examined why enterprises need more than an inventory of the open source components in their software. Understanding where dependencies come from, whether they are maintained, how they handle vulnerabilities, and what options exist when problems emerge is increasingly imp...
L'UniversitĂ© publique d'Osaka a Ă©tĂ© victime d'une cyberattaque par rançongiciel, entraĂźnant l'arrĂȘt de prĂšs de 500 serveurs via l'intrusion dans son infrastructure de virtualisation. De nombreuses sauvegardes ont Ă©galement Ă©tĂ© chiffrĂ©es. L'incident, survenu Ă partir du 2 octobre 2026, affecte les sy...
Les écoles de De Bernardus à Oudenaarde ont été victimes d'une cyberattaque. Les données d'environ 4 200 élÚves et membres du personnel ont été volées. Les informations volées incluent des noms, des adresses e-mail, des numéros de registre de population et des adresses de domicile des enseignants, a...
Knowing an application contains open source components is not the same as understanding the software and communities behind them.For many organizations, the software supply chain extends across thousands of dependencies, developed and maintained by communities, foundations, vendors, and individual c...
Sophos has been named a Leader in the IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises 2026, recognizing the strength of our prevention-first approach and stopping AI-era threats as early as possible.
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilÚges et un déni de service à distance.