> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Ireland’s DPC fined Google €403 million over GDPR violations involving location data, transparency, retention and user control. Ireland’s Data Protection Commission (DPC) just fined Google €403 million, and the case behind it goes back six years, to a set of complaints that never really went away. T...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. [...]
Ad biz promises users control while bug could expose voice prompts
Ireland’s Data Protection Commission will fine Google more than €403 million ($462 million) over the tech giant’s processing of location data, concluding an inquiry into the company that began in early 2020.
'Humans are responsible, not the AI,' argues Scott Bessent as he calls out OpenAI agents' hack of Hugging Face
It was discovered that GStreamer Good Plugins incorrectly parsed certain
MRF files. A remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2026-18295, CVE-2026-18296)
It was discovered that GStreamer Good Plugins incorrectly parsed certain
PNG files. A remote attacker could...
Several security issues were fixed in Expat.
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. [...]
Hackers targeted two Colorado water utilities, changing OT settings and disabling alarms, but causing no impact on water services or safety. Foreign hackers targeted the operational technology (OT) systems of two small private water utilities in Colorado in late August, apparently trying to disrupt...
It was discovered that GStreamer Base Plugins incorrectly handled certain
OGG media files. A remote attacker could possibly use this issue to
execute arbitrary code if it opened a specially crafted file.
Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. [...]
L'Agence espagnole de protection des données sanctionne un courtier en données pour la réutilisation commerciale de données de travailleurs indépendants issues du recensement public, en l'absence de base juridique valide et sans information préalable des personnes concernées.Faits et contexteL'Agenc...
Le Comité européen de la protection des données (CEPD) a adopté des lignes directrices sur l'imposition des amendes administratives ainsi que la version finale de ses orientations relatives à l'interaction entre le Règlement sur les services numériques (DSA) et le RGPD.Les nouvelles lignes directric...
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17.
Microsoft's own hardware-c...
La Commission de protection des données irlandaise a infligé une amende record de 403 millions d'euros à Google pour des manquements liés à la loyauté, la transparence et la conservation des données de localisation des utilisateurs au sein de ses services. L'autorité a estimé que les utilisateurs n'...
La Commission de protection des informations personnelles (PIPC) sud-coréenne a annoncé la désignation de deux nouvelles entités en tant qu'opérateurs de ses "Zones d'innovation pour les informations personnelles".Le Service national des impôts et l'Agence coréenne de contrôle et de prévention des m...
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account credentials from over 7,000 cryptocurrency wallets, according to a new joint cybersecurity advisory.
The primary targets...
L'autorité polonaise de protection des données (UODO) a participé à une conférence sur la cyber-résilience et la gestion de la sécurité de l'information dans le secteur de la science et de l'enseignement supérieur.L'événement, intitulé "Gestion de la sécurité de l'information dans le secteur de la s...
Selon un document divulgué, la présidence irlandaise du Conseil de l'Union européenne propose une modification du RGPD visant à légaliser par défaut l'utilisation des données à caractère personnel pour l'intelligence artificielle (IA).La proposition, examinée dans le cadre du paquet "Omnibus Numériq...
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data.
The post Google Hit With $463 Million Fine for EU Location Data Rule Breach appeared first on SecurityWeek.