> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and updates. Ivanti has patched two zero-day vulnerabilities (CVE-2026-111357 and CVE-2026-118527) exploited in attacks on its Connect Secure VPN, underscoring ongoing risks in remote access technologies. A new Windows infostealer named VOLTA utilizes AI to prioritize stolen data based on the victim's financial value, indicating a troubling trend in malware sophistication. Additionally, the Aur0ra ransomware gang is employing AI agents to enhance their network infiltration and credential theft capabilities. In response to data scraping concerns, Reddit plans to restrict content access to logged-in users. Various Oracle updates address security flaws in Linux, including DNS attack vulnerabilities and mTLS connection issues, highlighting the importance of regular patching in mitigating risks.
|
// AI-powered summary generated at 08:00
Cette décision illustre un cas de figure procédural rare où une procédure de sanction est clôturée non pas sur le fond, mais en raison de l'expiration du délai légal de traitement par l'autorité de contrôle, sans qu'une décision sur les manquements allégués n'ait été rendue.Faits et contexteL'autori...
L'autorité néerlandaise, en coopération avec la Commission Nationale de l'Informatique et des Libertés (CNIL), sanctionne Uber pour avoir mis en œuvre un système de désactivation de comptes de chauffeurs reposant sur une prise de décision entièrement automatisée, en violation du RGPD, et pour un dé...
Adrian Junge was discovered that FFmpeg incorrectly handled certain media
files. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. (CVE-2026-66036, CVE-2026-66039)
Adrian Junge discovered that FFmpeg incorrectly handled certain media
files. An attacke...
L'Inspection nationale de la protection des données (DVI) de Lettonie a publié des éclaircissements sur l'étendue des informations relatives aux biens immobiliers des candidats à la députation qui doivent être rendues publiques.La loi électorale lettone impose aux candidats de déclarer leurs biens i...
L'Inspection d'État des données (DVI) de Lettonie a ouvert une enquête concernant un incident de sécurité notifié par la Direction de la sécurité du trafic routier (CSDD).L'incident a potentiellement permis à des personnes non autorisées d'accéder à des données personnelles détenues par la CSDD. L'e...
No risk to wider energy system, government tells The Reg
Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers.
Debian announces security vulnerabilities in webkit2gtk affecting processes and user privacy, recommending an upgrade to resolve issues in version 2.52.6-1~deb13u1.
Joshua Rogers discovered that curl incorrectly handled reusing connections
when client certificate settings changed. This could result in the wrong
client certificates being used, contrary to expectations.
Debian released an advisory addressing multiple vulnerabilities in zfs-linux, which could allow local users to escalate privileges and impact host storage due to improper permission checks.
TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements
NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions
Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers impersonated a member of the security team. [...]
Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users
Every time you add an extension or plugin to your browser, there's a risk that you might be doing more than managing your cryptocurrency wallet, generating passwords, taking notes, or tracking sports results. There's a chance that you have just handed a complete stranger access to your savings.
R...
Cellebrite shares 10 best practices for faster, safer, and more defensible AI-assisted investigations, with a focus on governance, traceability, and human oversight.
We found fake Microsoft-branded scanners that invent security problems, tell victims to uninstall AV, and then steer them into a refund scam.
ChatGPT for Teens promises safer AI for kids but experts warn about unproven protections. OpenAI risks normalizing age verification for LLMs.
This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die.
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet.
That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder tha...