La Cour administrative suprême de Pologne a confirmé la position de l'autorité de protection des données (UODO) selon laquelle les garanties prévues par le droit bancaire polonais en matière de traitement des données après l'extinction d'une obligation financière s'appliquent non seulement aux conso...
L'Autorité des données personnelles (AP) des Pays-Bas a publié des modèles pratiques destinés aux petites et moyennes entreprises pour faciliter leur mise en conformité avec les règles de protection des données.L'autorité a mis à disposition un modèle de registre des activités de traitement et un mo...
Two vulnerabilities were discovered in cjose, a C library implementing the JOSE standard, which could result in denial of service, execution of arbitrary code or plain text recovery in specific setups. For the stable distribution (trixie), these problems have been fixed in version 0.6.2.3-1+deb13u1.
L'autorité britannique de protection des données, le Bureau du Commissaire à l'Information (ICO), a confirmé son changement de nom pour devenir la Commission de l'Information à compter du 30 septembre 2026.Cette transition résulte de la Loi sur les données (utilisation et accès) de 2025, qui modifie...
Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned.
The post What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies appeared first on CyberScoop.
Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
The post “We Think the Security Control Is Working” Is No Longer Good Enough appeared first on SecurityWeek.
Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural r...
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN.
Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersona...
The federal government has inserted a provision into a funding deal with the state of California that would make the state abandon its gold standard net neutrality law, broadband affordability laws, and public safety protections. Doing so would be a huge step back for California, and would actually...
See the tech tools used by privacy experts, from a DIY smartwatch and travel router to Tails, Linux, Pi-hole, and offline Wikipedia.
'Enemies of the regime' on notice
This is the first public acknowledgment that the U.S. military put a space weapon in Earth's orbit.
Several security issues were fixed in kitty.
Several security issues were fixed in SRT.
CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...]
python-sql could allow an attacker to perform SQL injection attacks.
Snapcast could be made to expose sensitive information or run programs if it received specially crafted network traffic.
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world.
The malware is controlled via the Telegram messaging app and can cop...
Shibboleth could be made to expose sensitive information over the network.