> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
CISA's cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says.
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen.
The post Chinese espionage groups swarm to exploit triple-link chain of zero-days appeared first on CyberScoop.
The City Attorneyâs Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company claims the ads are not under the cityâs jurisdiction.
The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from nearby unpaired devices without requiring user interaction. [...]
Summary U.S. authorities have sanctioned Xinbi Guarantee, a major Chinese-language illicit marketplace that connects criminal networks with money laundering, scamâŠ
The post OFAC and DOJ Strike Xinbi, a Multibillion-Dollar Marketplace for Cybercriminals appeared first on Chainalysis.
Summary Purported white-hat hackers exploited the Liquid Network to withdraw $320 million in BTC from the networkâs reserve. A vulnerabilityâŠ
The post How The $320M Exploit of Liquid Network Went Down appeared first on Chainalysis.
Law enforcement agencies across the country are increasingly relying on spying technologiesâautomated license plate readers (ALPR), cell-site simulators, and facial recognition, to name a few--causing an outcry in many communities where people are rightly concerned about the threat to civil rights a...
Networking gear manufacturer MikroTik has released patches for six vulnerabilities in its RouterOS firmware, two of which can be chained together to take over devices without authentication over SSH. The exploit chain, dubbed MikroTrick, is already being used by attackers in t...
The U.S. government also carried out a seizure of $52.8 million from 52 wallets connected to the platform.
Une attaque par rançongiciel, facilitée par des mesures de sécurité fondamentales jugées insuffisantes, a conduit à la compromission de données personnelles, y compris de catégories particuliÚres. L'autorité a notamment relevé l'absence de déploiement systématique de l'authentification multifacteur,...
La loi RIPOST, récemment validée par le Conseil constitutionnel, étend significativement les dispositifs de surveillance policiÚre et administrative en France.L'article 50 de la loi prolonge l'expérimentation de la vidéosurveillance algorithmique (VSA) jusqu'en 2030. Initialement limitée à des événe...
The policy, passed under the Biden administration, forced health apps to disclose when usersâ personal health records were exposed in a breach or shared without authorization.
The post FTC rescinds policy requiring health apps to notify customers after a breach appeared first on CyberScoop.
L'autorité polonaise de protection des données, le Bureau de protection des données personnelles (UODO), annonce la tenue d'une nouvelle journée de consultations publiques à Rzeszów le 14 septembre 2026.Le 14 septembre 2026, des experts de l'autorité tiendront des consultations individuelles de 10h0...
Le Commissaire à l'information et à la protection des données (IDPC) de Malte a présenté les points saillants de son rapport annuel 2025 lors d'une interview télévisée.Le rapport met en évidence une augmentation du nombre de plaintes relatives à la protection de la vie privée et des données, les cas...
The new Apple Watch includes several âintelligentâ listening features that have privacy and security baked in. But the protections canât change the facts of what the tools do.
L'Inspection de la protection des données estonienne (AKI) a publié une circulaire rappelant aux établissements scolaires les principes d'utilisation sécurisée des applications et de l'intelligence artificielle.Adressée au personnel des établissements scolaires, cette circulaire souligne la nécessit...
L'avocat général de la Cour de justice de l'Union européenne (CJUE) a présenté ses conclusions sur la conformité d'une législation nationale belge relative à la conservation des données de communications électroniques avec le droit de l'Union.Saisie par la Cour constitutionnelle belge, la CJUE doit...
Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, incident response, and code review. The promise is speed, but a security tool that moves fast and raises too many false alarms doesnât save time. Engineers spend ti...
L'Agence Espagnole de Protection des DonnĂ©es (AEPD) a annoncĂ© l'ouverture d'une enquĂȘte d'office concernant un rapport du Bureau de la Communication du MinistĂšre de l'IntĂ©rieur.Cette enquĂȘte fait suite Ă la publication d'informations sur un rapport qui contiendrait les noms de journalistes accompagn...
L'autoritĂ© espagnole de protection des donnĂ©es a constatĂ© une violation du principe de minimisation par la Direction GĂ©nĂ©rale du Trafic, dont l'application mobile collectait et transmettait Ă un tiers un volume excessif de donnĂ©es personnelles en raison d'un module mal configurĂ©, et ce mĂȘme si les d...