> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
L'organisme de certification GUTcert, basé à Berlin, a été victime d'une cyberattaque. L'attaque a débuté le 5 septembre 2026 et a permis à des attaquants d'accéder à des parties des systèmes informatiques de l'entreprise. Entre le 6 et le 9 septembre 2026, environ 640 Go de données ont été volés. L...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added a Google Chromium V8 flaw, tracked as CVE-2026-85046 (CVSS score of 8,8), to its Known Expl...
The letter follows revelations about Serbian student activists being infected with Pegasus and NoviSpy, and coincides with other pressures on Belgrade.
The post European parliament members call for slowdown of Serbia’s EU entry over spyware use appeared first on CyberScoop.
Looks tasty.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Blog moderation policy.
Phishers find a new use for invisible Unicode tag characters
As AI moves into customer-owned environments, organizations need new ways to verify the systems, software, and AI assets they trust before releasing sensitive data, credentials, and models.
The post How to secure edge AI in customer-owned environments appeared first on Microsoft Security Blog.
Manchester Airports Group (MAG) data allegedly leaked by FulcrumSec exposes emails and phone numbers of 8.8 million people. Manchester Airports Group, which operates Manchester, London Stansted and East Midlands airports, has confirmed a data breach involving customer information held in a third-par...
We’re pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider’s Audit Report (OSPAR) assessment on July 29, 2026, in line with the OSPAR version 2.0 framework. The Association of Banks in Singapore (ABS) established the Guidelines on Control O...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 1:140.15.0esr-1~deb13u1. We recommend that you upgrade your thunderbird packages.
Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- OCFS2 file system;
- SCTP protocol;
(CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246,
CVE-2026-5330...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NVIDIA Tegra memory controller driver;
- File systems infrastructure;
- Network file system (NFS) server daemon;...
Why disciplined dependency modernization is one of the highest-leverage engineering investments a security product can make.Â
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver's licenses. [...]
La Commission de protection des informations personnelles (PIPC) sud-coréenne a présenté son projet de budget pour 2027, s'élevant à 99 600 000 000 wons (environ 66 400 000 €), avec une attention particulière portée à la prévention et à l'encadrement de la transformation par l'intelligence artificie...
L'Inspection estonienne de la protection des données (AKI) a communiqué des instructions suite à une violation de données survenue chez la société Innovaatik OÜ.L'autorité a informé les responsables de traitement concernés, tels que les cliniques dentaires, qu'ils n'ont pas à lui soumettre de notifi...
It won’t work:
My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact.
An off-the-shelf VM is not enough to contain a mo...
L'Autorité polonaise de protection des données personnelles (UODO) annonce l'organisation d'un webinaire le 30 septembre 2026 sur les défis liés à l'application de l'intelligence artificielle dans le contexte de la protection des données.Ce webinaire, intitulé "Du Règlement IA aux réglementations na...
L'autorité finlandaise de protection des données a ouvert une enquête d'office concernant la légalité des vidéos publiées par un créateur de contenu sur les réseaux sociaux, qui filment des tiers à leur insu.L'enquête vise les activités du créateur de contenu "Kotkamies", qui diffuse des vidéos en c...
Google a corrigé 12 failles dans Chrome 152, dont la CVE-2026-85046, une faille zero-day dans le moteur JavaScript V8 déjà exploitée. La sixième de 2026.
Le post Google Chrome : la 6ème faille zero-day de 2026 est là , patchez sans attendre a été publié sur IT-Connect.