> TODAY'S SUMMARY (44 articles)
Today's cybersecurity landscape highlights several significant threats. Chainalysis reported a data breach resulting from an AI-driven cyberattack that exploited offensive agentic techniques. Meanwhile, the FBI attributed a massive $6.3 billion cryptocurrency heist from Binance to North Korean hackers, known as TraderTraitor, prompting urgent calls for the crypto industry to bolster transaction monitoring. Ransomware continues to pose a threat, with Synology warning of increased C3RB3R attacks targeting NAS devices. Additionally, attackers impersonated IT support on Microsoft Teams to gain unauthorized access to company data, and a supply chain attack involved a malicious code extension that created reverse SSH tunnels. These incidents underscore the evolving tactics of cybercriminals, particularly the integration of AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal security risks.
The post Former NSA Director Paul Nakasone Launches National Security Advisory Firm appeared first on Sec...
L'autorité danoise de protection des données réitère sa position ferme selon laquelle les difficultés organisationnelles internes, telles que le manque de ressources ou un arriéré de dossiers, ne constituent pas une justification valable pour le non-respect des délais de réponse aux demandes de droi...
L'Agence pour la protection des données personnelles (AZOP) a émis un avis de principe sur les modalités de communication de la documentation d'un processus de recrutement à un candidat non retenu.Saisie de la demande d'une candidate au poste de directeur d'école souhaitant obtenir copie de la docum...
Escape Data ZATAZ 2.0 mêle escape game, OSINT, observation et réflexes cyber dans une enquête numérique estivale.
L'Agence pour la protection des données personnelles croate (AZOP) a émis un avis sur l'équilibre entre la transparence des réunions d'un conseil d'établissement scolaire et la protection des données lors de la nomination d'un directeur.Saisie d'une demande concernant la présence du public lors d'un...
The bank said there is no evidence that its own systems, networks or data repositories were compromised.
This week, EFF, along with Big Brother Watch, Defend Digital Me, Liberty, Open Rights Group, Race Equality First, Statewatch, and Stopwatch, wrote to Nottinghamshire Police Force in the UK raising concern about the proposed roll-out of live facial recognition technology (LFR), and called for its imm...
Cyberattaque : des données de clients Pokémon Center exposées et certaines précommandes annulées en Europe.
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [...]
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and no...
On August 10th, 2026, we received a submission for an Unauthenticated Privilege Escalation vulnerability in Pods, a WordPress plugin with more than 100,000 active installations. This vulnerability allows unauthenticated attackers to escalate their privileges to administrator and perform various admi...
Citrix a corrigé deux vulnérabilités dans NetScaler ADC et Gateway. La CVE-2026-19490 ouvre la porte à un contournement de l'authentification à distance.
Le post Citrix NetScaler (CVE-2026-19490) : cette faille critique permet de contourner l’authentification a été publié sur IT-Connect.
Un pirate renvendique le vol de codes sources à un géant de la grande distribution, sur fond d’une précédente fuite interne.
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun.
Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad fra...
Un vendeur propose des bases de joueurs de casino européens contenant coordonnées, téléphones et données de dépôt.
Checker max analyse Solana par lots de 1 000 adresses, une capacité sensible pour le triage de portefeuilles proposé sur un forum de pirates.
Other noteworthy stories that might have slipped under the radar: Threema DDoS attack, Evooo1Bot Linux botnet, Crypto4A secures top-tier NIST certification.
The post In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug appeared first on SecurityWeek.
La faille CVE-2026-18963 permet de réinitialiser le mot de passe de n'importe quel compte Keycloak sans authentification. Un patch est disponible.
Le post Keycloak : cette faille critique permet de pirater un compte via la fonction de mot de passe oublié a été publié sur IT-Connect.
Sen. Ron Wyden and Rep. Greg Casar want a GAO probe on the government’s use of spyware and other sophisticated hacking tools and authorities.
The post Lawmakers seek watchdog review of federal hacking of Americans appeared first on CyberScoop.