[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (109 articles)

|

// AI-powered summary generated at 16:00

> Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns
> Court Should Curb Abuse of Grand Jury Subpoenas Targeting Social Media Users
A federal appeals court should curb the government’s abuse of grand jury subpoenas to unmask social media users who criticize lawless immigration enforcement. That is the message from the ACLU, EFF, and other civil liberties and trade groups who filed a friend-of-the-court brief in a sealed case in...
> Debian Firefox ESR Update Addresses Multiple Security Issues
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, privilege escalation, information disclosure or spoofing. For the stable distribution (trixie), these prob...
> Treasury Sanctions Russians, North Koreans supporting DPRK IT Worker Fraud
Summary OFAC sanctioned Russian and DPRK nationals that targeted U.S. businesses with fraudulent IT workers, generating cryptocurrency proceeds to fund
 The post Treasury Sanctions Russians, North Koreans supporting DPRK IT Worker Fraud appeared first on Chainalysis.
> Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Accord...
> Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’ appeared first on CyberScoop.
> The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO 
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Accord...
> Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]
> PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. The post PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Mo...
> UODO - autorité polonaise
La Cour administrative suprĂȘme de Pologne a confirmĂ© une sanction de l'autoritĂ© polonaise de protection des donnĂ©es (UODO), rappelant que si le consentement oral au traitement de donnĂ©es de santĂ© peut ĂȘtre valable, il incombe au responsable du traitement de dĂ©montrer, en vertu du principe de respons...
> PIPC - autorité sud-coréenne
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a annoncé la tenue d'une réunion de partage des résultats sur l'utilisation des informations pseudonymisées, destinée à soutenir les organismes dans leurs projets de recherche et de développement.Prévue pour le 28 octobre...
> Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO...
> UODO - autorité polonaise
L'AutoritĂ© polonaise de protection des donnĂ©es personnelles (UODO) annonce l'organisation d'un webinaire sur la protection des donnĂ©es des patients dans le secteur de la santĂ©.Ce sĂ©minaire en ligne, intitulĂ© "Protection des donnĂ©es personnelles dans les entitĂ©s mĂ©dicales – obligations des fournisseu...
> Datatilsynet - autorité norvégienne
L'autorité norvégienne de protection des données (Datatilsynet) alerte sur les risques liés à l'émergence d'agents d'intelligence artificielle autonomes et formule des recommandations pour leur gestion proactive par les entreprises.L'autorité souligne que l'intelligence artificielle évolue de simple...
> European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancers’ entire workday.
> GPDP - autorité italienne
Le Garant italien de la protection des données s'est exprimé lors d'une audition devant la XIVe Commission de la Chambre des députés au sujet de la proposition de rÚglement européen sur les enfants (EU Kids Act), soulignant la nécessité de concilier la protection des mineurs avec leur vie privée et...
> AKI - autorité estonienne
L'autorité estonienne de protection des données (AKI) a publié une série de recommandations destinées aux sites de commerce en ligne pour renforcer la sécurité des données personnelles.L'autorité souligne que les failles de sécurité proviennent souvent d'erreurs simples, telles que des logiciels non...
> Unwrapping Retail Peak Season Cyber Threats
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42.
> ICO - autorité britannique
La police du Staffordshire a fait l'objet d'une réprimande de la part de l'autorité britannique pour avoir illégalement communiqué l'adresse d'une victime de violences domestiques à son agresseur présumé, en raison de mesures de sécurité et de formation internes jugées insuffisantes.Faits et context...
> ANSPDCP - autorité roumaine
Une clinique a Ă©tĂ© sanctionnĂ©e pour avoir traitĂ© des donnĂ©es de patients sans base lĂ©gale et, de surcroĂźt, pour ne pas avoir coopĂ©rĂ© avec l'autoritĂ© de contrĂŽle lors de son enquĂȘte.Faits et contexteL'AutoritĂ© Nationale de Surveillance du Traitement des DonnĂ©es Ă  CaractĂšre Personnel (ANSPDCP) a aujou...