> TODAY'S SUMMARY (108 articles)
Today's cybersecurity landscape highlights several significant threats and trends. AI models continue to leak sensitive corporate data, with over 13,000 exposed images identified by Glow Security. A major breakthrough in law enforcement occurred with the arrest of a ShinyHunters leader in the Netherlands, coinciding with recent high-profile hacks, including an attack on the FBI. Russian threat actor Star Blizzard has refined phishing techniques, while Citrix NetScaler is facing mass exploitation of a zero-day vulnerability (CVE-2026-88771). Apple has patched a critical zero-day flaw (CVE-2026-86950) linked to sophisticated attacks, underscoring ongoing vulnerabilities in popular software. Additionally, the Pentagon personnel agency breach affecting 3 million individuals emphasizes the persistent risk to sensitive government data.
|
// AI-powered summary generated at 16:00
WordPress updates help close known vulnerabilities before automated attacks can find and exploit them. Once a patch is released, attackers often move quickly to scan for sites that have not yet updated.
It’s easy to put off updates when everything seems to be working. But once a vulnerability is pub...
Patch Tuesday: Microsoft fixes a record 621 CVEs, including 2 exploited zero-days and critical flaws affecting SharePoint, RDP, Hyper-V, and AD FS. Microsoft’s July 2026 Patch Tuesday is, by a significant margin, the largest single-month security release in the company’s history. The Zero Day Initia...
SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released security updates. [...]
One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. Interoperability allows users, and not the manufacturers of their devices or largest player in a market, to decide what application best serves them. Unsurp...
Remember when last month's 206 CVEs seemed eye-watering? Yeah, those were the days
Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical".Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild.CVE-2026-56155 is...
On this hot summer’s day in Basel, Switzerland, the seventh HTTP workshop started. These events tend to work roughly the same way and the people in the room are also to large extent familiar and known since previous editions. Forty people in a meeting room, where we take turns in doing short talks o...
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200.
Those two live bugs are the on...
The Spanish Police dismantled a cybercrime and money-laundering organization that made €140 million ($160 million) from investment fraud and business email compromise (BEC) attacks. [...]
Several security issues were fixed in Vim.
Several security issues were fixed in Dnsmasq.
The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking exponential increase.
The post Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record appeared first on CyberScoop.
This year the state of New York had the dubious honor of being the first to pass a controversial provision to mandate all 3D printers come with surveillance and censorship. That means not only is there a ticking clock to protect every artist, researcher, engineer, and hobbyist in the state, but ther...
U.S. sanctions hit VPN provider 1VPNS and a cryptor seller for enabling ransomware gangs behind billions in losses to critical infrastructure. The U.S. Treasury’s Office of Foreign Assets Control sanctioned two individuals and one entity on July 13 for supplying tools and infrastructure to ransomwar...
La Commission de protection des informations personnelles (PIPC) sud-coréenne, en collaboration avec l'Agence coréenne de l'internet et de la sécurité (KISA), a lancé un projet de démonstration visant à établir l'infrastructure technique pour le droit à la portabilité des données, désigné "MesDonnée...
The Russians face multiple charges for allegedly providing cybercriminals with infrastructure and tech support through the St. Petersburg-based business Media Land and a sister company, ML Cloud.
L'autorité finlandaise de protection des données a publié son rapport d'activité pour l'année 2025, qui met en lumière l'impact de l'intelligence artificielle et du contexte géopolitique sur ses travaux, ainsi qu'une augmentation notable du nombre de dossiers traités.En 2025, l'autorité a enregistré...
L'autorité espagnole de protection des données (AEPD) a publié des recommandations et annoncé une série d'actions visant à promouvoir un modèle commun de conformité en matière de protection des données au sein du secteur public.Issues de consultations menées avec l'Administration Générale de l'État...
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning p...
L'autorité polonaise de protection des données (UODO) a sollicité une révision législative des règles de conservation des données biométriques et génétiques des agents et employés de la police, estimant le cadre actuel non conforme aux principes de protection des données.Le président de l'UODO a int...