IT-Sentinel

> TODAY'S SUMMARY (18 articles)

Today's cybersecurity news highlights various significant threats and trends:

**AI-Generated Code Concerns**: Proton's CEO downplays security testing for AI-written code, raising concerns about potential vulnerabilities in software development.
   
**Data Breach at DHS**: A hacker leaked personal data of over 40,000 Department of Homeland Security employees, underscoring the ongoing risks of data breaches in government sectors.

**Fake IT Scams**: Attackers impersonating IT support managed to manipulate employees into granting remote access, revealing the effectiveness of social engineering tactics.

**Cryptocurrency Exchange Breach**: Binance experienced a significant security incident affecting $6.3 billion in assets, highlighting vulnerabilities in cryptocurrency platforms amid increasing cyber threats.

**Scammers Adapt Quickly**: Fraudulent online shopping sites are being rapidly re-established after takedowns, indicating persistent challenges in combating e-commerce scams.

**IoT Device Risks**: A recent report identifies smart TVs as major targets for cyber vulnerabilities, emphasizing the need for security measures in household IoT devices.

// AI-powered summary generated at 08:00

> Hackers abused Claude to extract secrets from 1.8M Android apps

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-09-11 20:19]

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes. [...]

> Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device

[SOURCE] Recorded Future [LANGUAGE: EN] [DATE: 2026-09-11 20:00]

The Florida Department of Motor Vehicles confirmed a data breach claimed by the cybercrime group ShinyHunters, saying it originated with the theft of credentials stored on a police officer's personal device.

> Florida confirms DMV database breached via stolen police account

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-09-11 19:00]

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee. [...]

> Meta Sued Over Training Data for Its AI and Face-Recognition Systems

[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2026-09-11 18:59]

The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation models and to build its unreleased “NameTag” face recognition feature.

> What does CC mean in emails? To, CC, and BCC explained

[SOURCE] Proton Blog [LANGUAGE: EN] [DATE: 2026-09-11 18:57]

Learn the different ways to send an email to multiple email addresses with our explainer on To, CC, and BCC.

> GitLab’s critical flaw is already drawing internet-wide probes

[SOURCE] CyberScoop [LANGUAGE: EN] [DATE: 2026-09-11 18:41]

One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately. The post GitLab’s critical flaw is already drawing internet-wide probes appeared first on CyberScoop.

> Microsoft sees some new wrinkles in invoice-scam emails

[SOURCE] Recorded Future [LANGUAGE: EN] [DATE: 2026-09-11 18:40]

Researchers analyzed a flood of fraudulent business emails and found that the threat actors had doubled-up on tactics to make them appear legitimate, including help from AI.

> My Talk at DEF CON

[SOURCE] Schneier on Security [LANGUAGE: EN] [DATE: 2026-09-11 18:06]

Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It’s a combination of the potentialities I raised in my 2022 book A Hacker’s Mind and the lessons we’re learning from current AI models engaging in hacking behavior. I’m really proud of the talk, and the fact t...

> More JFrog Artifactory bugs under attack, and all 3 have patches

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-09-11 17:43]

If you're waiting for a sign to upgrade to a fixed version: this is it

> The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-09-11 17:27]

Researchers found 36,769 exposed AI endpoints, but only 2% had an HTTP authentication gate. Running AI locally is supposed to give organizations more control. Models, prompts and documents stay on infrastructure they manage instead of being sent to a third-party cloud. But that advantage disappears...

> Passkey-themed phishing attacks lead to Microsoft 365 data theft

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-09-11 17:26]

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. [...]

> Phishing Research Challenges Conventional Security Awareness Testing

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-09-11 17:23]

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks. The post Phishing Research Challenges Conventional Security Awareness Testing appeared first on SecurityWeek.

> Médias et blogs