> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
L'Inspection d'État des données (DVI) de Lettonie a initié une consultation publique concernant un projet de lignes directrices sur la gestion des violations de données à caractère personnel.Ce projet vise à fournir un soutien pratique aux organisations et aux délégués à la protection des données po...
L'autorité espagnole de protection des données (AEPD) a sanctionné un opérateur de télécommunications pour avoir associé à tort le numéro d'identification national d'une cliente aux données d'un tiers. L'autorité a retenu la négligence de l'opérateur, aggravée par le délai de près de deux ans pour p...
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17.
Microsoft's own hardware-c...
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account credentials from over 7,000 cryptocurrency wallets, according to a new joint cybersecurity advisory.
The primary targets...
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data.
The post Google Hit With $463 Million Fine for EU Location Data Rule Breach appeared first on SecurityWeek.
Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the way three of its features handled people's location data from May 2018 to February 2020.
Ireland's Data Protection Commission (DPC), Google's lead regulator in the EU, also ordered the company to make its...
This week on the Lock and Code podcast, we speak with Emanuel Maiberg about Amazon's effort to scan and destroy rare books for AI training.
It was discovered that GLib's GDBus authentication mechanism failed to
enforce length limitations on data lines read from a client. An
unauthenticated attacker could exploit this to cause a denial of service
via resource exhaustion. (CVE-2026-15588)
It was discovered that the xdgmime library in GLi...
Two separate reports of security flaws in OpenAI systems highlight how even a company spending billions on developing its own AI-powered cybersecurity testing tools remains vulnerable.
In one incident, researchers breached OpenAI systems with the help of a rival AI develope...
Kai Aizen discovered that the Networking component of OpenJDK 21 did not
correctly handle user authentication. A remote attacker could possibly use
this issue to leak sensitive information. (CVE-2026-61308)
It was discovered that the JSSE component of OpenJDK 21 did not correctly
handle user authen...
Kai Aizen discovered that the Networking component of OpenJDK 17 did not
correctly handle user authentication. A remote attacker could possibly use
this issue to leak sensitive information. (CVE-2026-61308)
It was discovered that the JSSE component of OpenJDK 17 did not correctly
handle user authen...
After the exit of around 1,000 CISA workers, legislation from three top House Democrats orders a force structure assessment like that more common to military branches.
The post Dems seek top-to-bottom assessment of CISA workforce appeared first on CyberScoop.
Apprenez à sécuriser l'accès SSH de Proxmox VE avec une clé, à désactiver le mot de passe root et à éviter les pièges courant dont l'authorized_keys partagé.
Le post Proxmox VE : configurer l’accès SSH avec une authentification par clé a été publié sur IT-Connect.
Cellebrite’s Matt Goeckel demos Genesis on a real enterprise case – UFDRs, CDRs, documents, audio and video – showing how agentic AI surfaces leads and timelines while linking every finding back to its source.
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek.
Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. [...]
More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.
Microsoft a corrigé le bug du copier-coller dans Excel 2016 à 2024. Sur Office 2016 et 2019, le collage peut encore échouer dans un cas bien précis.
Le post Bug copier-coller Excel : voici les correctifs pour Microsoft Office a été publié sur IT-Connect.
Why almost 90% of small companies have to deal with cyberincidents, and how to build a security setup without straining your budget or IT team.
Ghostscript could be made to crash or run programs as your login if it opened a specially crafted file.