> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
A new CIISec poll finds the majority of industry professionals would prefer more rigorous cybersecurity laws
Data I/O has revealed operational disruption following a ransomware breach that forced it to take some systems offline
Corrected Download and Article links in the Security Updates table. This is an informational change only.
Corrected Download and Article links in the Security Updates table. This is an informational change only.
In a previous blog post, we explored the technical side of passkeys (also known as discoverable credentials or resident keys), what they are, how they work, and why they’re a strong alternative to passwords. Today, we’ll show how passkeys are used in the real world - by everyday users and security p...
Corrected Download and Article links in the Security Updates table. This is an informational change only.
Les derniers articles scientifiques co-écrits par des agents issus des labos de l’ANSSI
anssiadm
mar 26/08/2025 - 07:00
Découvrez les parutions scientifiques les plus récentes auxquelles ont pris part différents agents de l’ANSSI issus des laboratoires de la division...
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1....
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.1. The...
Le 26 août 2025, Citrix a publié un bulletin de sécurité (cf. section Documentation) concernant, entre autres, la vulnérabilité CVE-2025-7775. Celle-ci permet une exécution de code arbitraire à distance et affecte toutes les versions de Citrix NetScaler ADC et NetScaler Gateway, dans certaines...
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
A critical vulnerability in older versions of the Claude Code for Visual Studio Code (VS Code) and other IDE extensions allowed malicious websites to connect to unauthenticated local WebSocket servers, potentially enabling remote command execution
StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload
Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass
Lotte Card a signalé une cyberattaque après avoir détecté des signes de violation dans ses serveurs internes à la fin du mois dernier. L'entreprise a découvert du code malveillant sur l'un de ses serveurs et a ensuite effectué un examen approfondi de ses systèmes. Aucune fuite de données sensibles d...
Lingdang CRM 8.6.4.7 - SQL Injection
Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure
Cool Wind Ventilation Corp. experienced a network security incident in which an unauthorized third-party accessed their network environment, potentially exposing personal information. A cyberattack against Cool Wind Ventilation was claimed by Play on September 9.
Blytheco, Inc. experienced a network security incident where an unauthorized third-party accessed their network environment, potentially exposing personal information. The incident occurred on or about August 26, 2025, and a data file of potentially impacted individuals was finalized on November 7,...