> TODAY'S SUMMARY (10 articles)
Key cybersecurity updates today include the sentencing of Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad cyberattacks, highlighting ongoing threats from state-sponsored hacking. A critical vulnerability in Drupal Commerce Core is being actively exploited, urging affected online stores to patch immediately. In another alarming trend, researchers have identified a malicious ChatGPT link that can execute code in users' sessions, potentially compromising private conversations. Additionally, Cloudflare reported a significant increase in DDoS attacks, with 18.2 million recorded in Q3, reflecting a 38% rise. On the software front, major releases of Wireshark and YARA-X have been announced, addressing various bug fixes and improvements.
|
// AI-powered summary generated at 12:00
L'Autorité polonaise de protection des données personnelles (UODO) a annoncé la poursuite de son initiative "L'UODO en tournée nationale" avec des visites prévues dans les voïvodies de Lublin et de Sainte-Croix.Cette campagne, lancée en septembre 2024, vise à sensibiliser les citoyens, les entrepris...
L'Autorité de protection des données belge a classé sans suite une plainte relative à la gestion des témoins de connexion (cookies), les faits initiaux étant prescrits. Elle a néanmoins profité de cette décision pour rappeler les exigences de validité du consentement, notamment l'obligation d'offrir...
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.
One of them, ZDI-CAN-33774, can be triggered before any network authentication. The...
Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
The post The Current Landscape of OAuth Attacks appeared first on Unit 42.
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
OpenVPN could allow unintended access to network services.
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018.
According to multiple reports from the Associated Press, the New York...
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Avec l'application Tiny11 Builder, il devient facile de créer une image Tiny11 allégée adaptée aux ordinateurs vieillissants et incompatibles avec Windows 11.
Le post Tiny11 Builder : créez un Windows 11 allégé facilement, sans toucher à PowerShell a été publié sur IT-Connect.
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]
It was discovered that OpenVPN incorrectly handled certificate subject
fields. A remote authenticated user could possibly use this issue to
impersonate other users.
What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling.
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic.