> TODAY'S SUMMARY (15 articles)
Today's cybersecurity news highlights several significant threats and trends. South Africa leads a 13.4% growth in Sub-Saharan Africa's crypto economy, indicating increasing financial reliance on cryptocurrencies. A new zero-day vulnerability in VMware ESX, exploited by China-linked hackers, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. WordPress released a critical update addressing 22 vulnerabilities, including one allowing remote code execution. Additionally, threat actors are exploiting PHP2Shell vulnerabilities in publicly accessible Palo Alto Networks management interfaces. Meanwhile, the Multi-State Information Sharing and Analysis Center reported credential theft affecting K-12 school districts, highlighting ongoing challenges in credential security.
|
// AI-powered summary generated at 08:00
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data.
The post Google Hit With $463 Million Fine for EU Location Data Rule Breach appeared first on SecurityWeek.
Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the way three of its features handled people's location data from May 2018 to February 2020.
Ireland's Data Protection Commission (DPC), Google's lead regulator in the EU, also ordered the company to make its...
This week on the Lock and Code podcast, we speak with Emanuel Maiberg about Amazon's effort to scan and destroy rare books for AI training.
It was discovered that GLib's GDBus authentication mechanism failed to
enforce length limitations on data lines read from a client. An
unauthenticated attacker could exploit this to cause a denial of service
via resource exhaustion. (CVE-2026-15588)
It was discovered that the xdgmime library in GLi...
Two separate reports of security flaws in OpenAI systems highlight how even a company spending billions on developing its own AI-powered cybersecurity testing tools remains vulnerable.
In one incident, researchers breached OpenAI systems with the help of a rival AI develope...
Kai Aizen discovered that the Networking component of OpenJDK 21 did not
correctly handle user authentication. A remote attacker could possibly use
this issue to leak sensitive information. (CVE-2026-61308)
It was discovered that the JSSE component of OpenJDK 21 did not correctly
handle user authen...
Kai Aizen discovered that the Networking component of OpenJDK 17 did not
correctly handle user authentication. A remote attacker could possibly use
this issue to leak sensitive information. (CVE-2026-61308)
It was discovered that the JSSE component of OpenJDK 17 did not correctly
handle user authen...
After the exit of around 1,000 CISA workers, legislation from three top House Democrats orders a force structure assessment like that more common to military branches.
The post Dems seek top-to-bottom assessment of CISA workforce appeared first on CyberScoop.
Apprenez à sécuriser l'accès SSH de Proxmox VE avec une clé, à désactiver le mot de passe root et à éviter les pièges courant dont l'authorized_keys partagé.
Le post Proxmox VE : configurer l’accès SSH avec une authentification par clé a été publié sur IT-Connect.
Cellebrite’s Matt Goeckel demos Genesis on a real enterprise case – UFDRs, CDRs, documents, audio and video – showing how agentic AI surfaces leads and timelines while linking every finding back to its source.
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek.
Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. [...]
More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.
Microsoft a corrigé le bug du copier-coller dans Excel 2016 à 2024. Sur Office 2016 et 2019, le collage peut encore échouer dans un cas bien précis.
Le post Bug copier-coller Excel : voici les correctifs pour Microsoft Office a été publié sur IT-Connect.
Why almost 90% of small companies have to deal with cyberincidents, and how to build a security setup without straining your budget or IT team.
Ghostscript could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in strongSwan.
Belgium’s national table tennis federation is investigating a cyberattack after a hacker claimed to have stolen data on tens of thousands of members.
Several security issues were fixed in ClamAV.
Memcached could be made to crash if it received specially crafted network traffic.