> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié le second volume de sa bande dessinée pédagogique "L'Agence de la vie privée", intitulé "Au-delà de l’écran", visant à sensibiliser à la cybercriminalité.Cet ouvrage, destiné aux adolescents et à leurs parents, aborde divers r...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié des orientations sur les enjeux de la réforme de la facturation électronique pour la protection des données personnelles, entrée en vigueur le 1er septembre 2026.Cette réforme impose à toutes les entreprises de pouvoir recevoi...
Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa.
The post Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 appeared first on SecurityWeek.
La Commission de la protection des informations personnelles (PIPC) de Corée du Sud met en œuvre, à compter du 11 septembre, des amendements à la Loi sur la protection des informations personnelles et son décret d'application visant à renforcer la prévention des violations de données et la protectio...
L'autorité italienne de protection des données a sanctionné une agence régionale pour l'emploi pour avoir publié en ligne et rendu indexable par les moteurs de recherche la liste des candidats à une procédure de recrutement, en l'absence de base légale spécifique justifiant une telle diffusion.Faits...
libEBML could be made to crash if it received specially crafted input.
La décision met en lumière la responsabilité du responsable de traitement dans la configuration des droits d'accès au dossier de santé électronique, y compris lorsque l'outil est fourni par une entité régionale, et rappelle que la finalité de ce dossier est strictement limitée aux soins du patient,...
L'autorité espagnole de protection des données a publié une décision de sanction à l'encontre de CAIXABANK, S.A. comprenant le prononcé d'une amende de 510 000 € pour des manquements en lien avec la protection des données dès la conception et l'obligation d'information dans le cadre de la gestion de...
Beets could allow malicious media metadata to compromise its web interface.
KissFFT could be made to crash or run programs if it received specially crafted input.
How ChatGPT tracks everything you do on your Mac, where your data ends up, and how to protect yourself from the risks this creates.
Google turned on a transfer feature in Android that moves passwords and passkeys straight from one password manager to another, with no file to download along the way. You start it from inside the app you are switching to, and Google says the data moves between the apps in a few seconds. “Historical...
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain.
The post Detect and disrupt AI-themed attacks with Microsoft Defender appeared first on Microsoft Security Blog.
It was discovered that Beets incorrectly escaped untrusted media metadata
in its web interface. An attacker could possibly use this issue to inject
arbitrary HTML or execute arbitrary JavaScript code in a user's browser.
A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]
Four different espionage groups used the same exploit kit to target recently fixed flaws, showing why “patch later” is a dangerous gamble.
It was discovered that libEBML incorrectly handled certain read and write
operations. An attacker could possibly use this issue to cause a buffer
overflow, resulting in a denial of service.
Cisco Talos says two recently patched Secure Firewall Management Center (FMC) vulnerabilities have been exploited by three separate threat clusters linked to ransomware and state-sponsored attacks. [...]
It was discovered that KissFFT incorrectly handled certain large Fourier
transform sizes on 32-bit architectures. An attacker could possibly use
this issue to cause KissFFT to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2025-34297)
It was discovered that KissFFT incorre...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Hardware crypto device drivers;
- NVIDIA Tegra memory controller driver;
- Network drivers;
- GFS2 file system...