> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
It was discovered that Minetest did not properly sanitize the Lua sandbox environment
when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code
and gain full file system access on the server. An attacker could use this issue to
compromise the server.
Microsoft désactive par défaut les prédictions de texte dans Word et Outlook. La fonction reste disponible, mais il faudra l'activer vous-même. Voici pourquoi.
Le post Word et Outlook : Microsoft va désactiver par défaut les prédictions de texte a été publié sur IT-Connect.
If you ever linked your Dropbox account to a Lenovo ID - perhaps to make life easier when logging in via a Lenovo laptop - you might want to take heed.
Read more in my article on the Hot for Security blog.
Mullvad arrêtera ses serveurs publics DoH (DNS-over-HTTPS) le 2 novembre 2026 et soutiendra Quad9 à la place. Voici qui est concerné et comment migrer.
Le post Vous utilisez les serveurs DNS de Mullvad ? Ils s’arrêteront le 2 novembre 2026 a été publié sur IT-Connect.
Découvrez comment réussir un réseau d’écrans en magasin ou en entreprise : choix du CMS, back-office industriel, gestion du réseau, etc.
Le post Sur quels critères techniques choisir une solution d’affichage multi-écrans / multi-sites ? a été publié sur IT-Connect.
JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point Research has tracked since early 2025. Unlike most malware, it hides its code in a format that makes analy...
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
Defending against cyber foes is among factors hitting food price inflation, report finds
A security issue was fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
It was discovered that MiniUPnPd contained an integer underflow
vulnerability in SOAPAction header parsing. A remote attacker could
use this issue to cause a denial of service or information disclosure
by sending a malformed SOAPAction header with a single quote.
Several security issues were fixed in the Linux kernel.
Ministers say ÂŁ17M corporate fines and forthcoming board-level governance rules provide sufficient accountability
On 27 August 2026, Manchester Airports Group told customers that "an unauthorised third party" had stolen their data. Car park bookings, lounge bookings, Fast Track purchases for airport security and passport control, along with airport WiFi sign-ups across Manchester, Stansted and East Midlands. Ro...
A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed. “A CVE identifier and an official fix will be issued within the week,” the company wrote in its September 3 advisory. ScreenConnect is a popular remot...
A security issue was discovered in the Linux kernel.
An attacker could possibly use this to compromise the system.
This update corrects flaws in the following subsystems:
- IPv6 networking;
- Netfilter;
Several victims of a recent breach of driver’s license information have sued the company they believe responsible
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- PowerPC architecture;
- Compute Acceleration Framework;
- Driver...
OpenAI has announced that it has reached a goal set last fall of having an automated research intern by September 2026. The milestone means a system can carry out well-defined research tasks under human direction, including work that would take a skilled researcher several days. The company is also...
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been r...