> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape reveals a range of significant threats and vulnerabilities. Companies are facing substantial losses, with token thefts related to illicit LLM charges costing over $100,000 daily. CISA has identified two critical vulnerabilities in Ivanti Connect Secure, urging immediate remediation. Google has disrupted the XCPE botnet, which was exploiting Android TV firmware. Meanwhile, a new AI-powered infostealer has emerged, effectively ranking stolen data by potential financial value. European supermarkets are grappling with a second wave of cyberattacks on their refrigeration systems, leading to widespread food spoilage. Additionally, the FBI has attributed the recent $6.3 billion Binance cryptocurrency heist to North Korean hackers, intensifying concerns over crypto security.
|
// AI-powered summary generated at 16:00
L'autorité norvégienne de protection des données (Datatilsynet) annonce sa participation au Festival de la Sécurité 2026, où elle tiendra une conférence sur les risques liés à l'usage non maîtrisé des agents d'intelligence artificielle.L'événement se déroulera du 24 au 26 août à Lillehammer, et l'au...
L'autorité danoise de protection des données (Datatilsynet) a clôturé son enquête d'initiative sur l'application de transport "Rejsekort". La décision analyse en profondeur la collecte continue de données de localisation lorsque les utilisateurs oublient de se déconnecter à la fin de leur trajet, au...
The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts.
The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and c...
L'autorité espagnole de protection des données sanctionne une entreprise pour avoir utilisé un système de vidéosurveillance captant le son dans des zones de travail, jugeant cette collecte de données audio excessive et non justifiée au regard du principe de minimisation.Faits et contexteL'Agence esp...
Le parquet néerlandais annonce que l'institut forensique a ouvert le smartphone Google Pixel d'un suspect, de quoi relancer certains débats.
Le post Le NFI a déverrouillé un Google Pixel dans une affaire criminelle néerlandaise a été publié sur IT-Connect.
Proton Mail now sorts your inbox into Categories automatically, while keeping the contents of your email private. Less noise, more focus.
Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget
Employee onboarding is one of the most critical – and often overlooked – moments in a company’s security lifecycle. While businesses focus on productivity and integration, the first hours and days of a new hire’s journey frequently introduce unnecessary risk.
These early-stage decisions can estab...
The Combating Organized Retail Crime Act has won a big House vote and could be on the fast track in the Senate — and supporters say it could help fight cybercrime.
The post Retail theft bill spurs ‘very large and very dangerous’ surveillance fears appeared first on CyberScoop.
Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska.
The post Hackers Target Zimbra Servers in Active Exploitation Campaign appeared first on SecurityWeek.
OpenAI has strengthened ChatGPT's protections for teens, but some of its strongest parental controls still depend on linked accounts.
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. [...]
Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page.
The AI secu...
Multiple security vulnerabilities in libgit2 could lead to arbitrary command execution, credential disclosure, denial of service, or unauthorized directory creation. Users are advised to upgrade to version 1.9.0+ds-2+deb13u1.
Practical digital minimalism tips to reduce screen time on iPhone and Android, plus a guide for kids and how to protect data from Big Tech.
We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it.
The post Surveillance – Everything You Wanted to Know, But Were Afraid to Ask appeared first on SecurityWeek.
Two Artifactory flaws allowed attackers to poison package metadata across software repositories
Because apparently even ransomware gangs can't trust the people they do business with
Après l'arrêt d'une offre Microsoft 365 gratuite pour les associations, des milliers d'espaces OneDrive ont été effacés des tenants Microsoft. À qui la faute ?
Le post Microsoft 365 : environ 171 000 associations auraient perdu leurs données OneDrive a été publié sur IT-Connect.
AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains how MSPs can monitor identity, email, and endpoint activity to detect and contain attacks that make it past the inbox. [...]