> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
La communication proactive et généralisée des données relatives au licenciement disciplinaire d'un agent à de multiples entités administratives, en prévision d'une éventuelle future candidature de sa part, est jugée illicite et contraire au principe de minimisation, dès lors que la législation secto...
L'autorité finlandaise de protection des données a ouvert une enquête d'office concernant la légalité des vidéos publiées par un créateur de contenu sur les réseaux sociaux, qui filment des tiers à leur insu.L'enquête vise les activités du créateur de contenu "Kotkamies", qui diffuse des vidéos en c...
It won’t work:
My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact.
An off-the-shelf VM is not enough to contain a mo...
L'Autorité polonaise de protection des données personnelles (UODO) annonce l'organisation d'un webinaire le 30 septembre 2026 sur les défis liés à l'application de l'intelligence artificielle dans le contexte de la protection des données.Ce webinaire, intitulé "Du Règlement IA aux réglementations na...
L'Inspection estonienne de la protection des données (AKI) a communiqué des instructions suite à une violation de données survenue chez la société Innovaatik OÜ.L'autorité a informé les responsables de traitement concernés, tels que les cliniques dentaires, qu'ils n'ont pas à lui soumettre de notifi...
Google a corrigé 12 failles dans Chrome 152, dont la CVE-2026-85046, une faille zero-day dans le moteur JavaScript V8 déjà exploitée. La sixième de 2026.
Le post Google Chrome : la 6ème faille zero-day de 2026 est là , patchez sans attendre a été publié sur IT-Connect.
La Commission de protection des informations personnelles (PIPC) sud-coréenne a présenté son projet de budget pour 2027, s'élevant à 99 600 000 000 wons (environ 66 400 000 €), avec une attention particulière portée à la prévention et à l'encadrement de la transformation par l'intelligence artificie...
Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised 5,000 Dropbox accounts, and Guardio is now valued at $1.1 billion.
The post In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation a...
Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates.
The post HPE Patches Critical RCE Vulnerabilities in AOS-CX appeared first on SecurityWeek.
Two cases of agents escaping to solve unsolvable problems paints an uncomfortable question: Is the entire internet in OpenAI's experimental agentic firing line?
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility.
The post OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders appeared first on SecurityWeek.
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters.
"Instead of using these characters to hide instructions from people while exposing them to AI models, the attacker used them to split financial lure words such as 'fundi...
The U.S. Department of Justice and the U.K.'s National Crime Agency and Crown Prosecutor signed a memorandum to cooperate on cases involving Southeast Asian scam operations.
Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian. [...]
PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server.
The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduc...
Deux suspects arrêtés après les attaques de ZeroBytes contre le fisc, tandis que l’enquête cyber se poursuit.
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors.
The attackers named the implant ted in debug strings left in the bin...
In its first annual assessment, published Friday, the City of London Police said victims reported losing ÂŁ6.3 million ($8.5 million) to account hacks in the year ending March 31, up from ÂŁ1.2 million ($1.6 million) a year earlier.
Microsoft is working to resolve a known issue that causes delays or blocks some users from opening the Microsoft Teams desktop client on Windows systems. [...]
Researchers have found a way to hack Boeing 737 systems with a device that costs less than US$100. Here’s how the Bus Driver attack works, and how realistic a threat it actually is.