> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the deaths of two minor victims in Mississippi and North Carolina. [...]
Infostealers can steal active Claude sessions, bypass 2FA and drain paid usage. Anthropic is revoking access and refunding unauthorized charges. Anthropic confirmed that several infostealer malware can hijack an active Claude login session and let attackers burn through your usage without ever touch...
The ruling is part of Anthropic's legal battle against the Pentagon after the government labeled the company as a supply chain risk earlier this year.
The post Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ appeared first on SecurityWeek.
A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage high-value...
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news
The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.
The post Berlin Won’t Pay Extortion Group Claiming Data Theft appeared first on SecurityWeek.
Proton a analysé plus de 7 000 applications VPN mobiles : 85 % de celles téléchargées aux États-Unis contiennent des traqueurs et 64 accèdent à votre position.
Le post Applications VPN : 85 % de celles téléchargées aux États-Unis embarquent des traqueurs a été publié sur IT-Connect.
Microsoft asked customers this week to ignore incorrect alerts that Defender Antivirus has been turned off after installing the latest Defender updates. [...]
Cloud architectures designed to withstand human attackers are facing a new threat: AI agents that rewrite the rules on the pace and scope of attacks.
The recent OpenAI incident involving Hugging Face offers an early example of what an autonomous AI attack can look like, wit...
Gitea a publié la première version stable de son extension pour VS Code : suivi des Actions et revue des pull requests sans quitter l'éditeur de code.
Le post Gitea sort enfin son extension officielle pour VS Code a été publié sur IT-Connect.
Les développeurs Debian ont voté : l'IA générative n'est ni interdite ni recommandée, mais celui qui soumet une contribution en assume toute la responsabilité.
Le post Debian autorise officiellement l’IA générative, mais le contributeur reste responsable a été publié sur IT-Connect.
A maintainer reading a merge request can’t tell whether a person or a model wrote the diff, and nobody has to say. Debian developers voted on that through August 28, and Kurt Roeckx, the project secretary, announced the result: the winning option encourages contributors to disclose AI assistance and...
PaperCut NG et MF sont visés par 2 failles déjà exploitées : CVE-2026-81578 et CVE-2026-82078. Le premier correctif a été contourné, un second est disponible.
Le post PaperCut NG/MF : deux failles exploitées et un premier correctif contourné a été publié sur IT-Connect.
The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were victims of attacks carried out by Chinese threat actors, instead now pointing out that they were among those targeted.
Last week, the DoJ said the National Aeronautics and...
Choisissez judicieusement votre infogérant : exiger des chiffres, une supervision continue et une sortie négociée dès le départ. Voici 7 exigences essentielles.
Le post Infogérance en 2026 : les 7 exigences qui séparent un contrat sérieux d’une plaquette commerciale a été publié sur IT-Connect.
A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain. A critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute co...
OpenClaw is open source software that hands an AI model small standing jobs across your accounts, the kind of chore where it watches a mailbox for vendor advisories and pings you on Telegram when one names a product you run. OpenClaw 2.0 is the largest update in the project’s history. A user-built d...
A list of topics we covered in the week of August 24 to August 30 of 2026
PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.
The post More Details Emerge on Exploited PaperCut Vulnerabilities appeared first on SecurityWeek.
In this Help Net Security interview, Dr. Joye Purser, Global Field CISO at Cohesity, explains how to rank vulnerabilities when KEV, EPSS, and CVSS point in different directions. Active exploitation comes first, then exploit likelihood, then technical severity, with adjustments for asset exposure, bu...