> TODAY'S SUMMARY (47 articles)
Today's cybersecurity landscape highlights a growing concern over AI-driven threats. The UK's National Cyber Security Centre (NCSC) warns that AI-powered attacks, particularly in ransomware, could target critical infrastructure by 2028, as legacy systems remain vulnerable. Meanwhile, a significant breach at Revolve has compromised the card details of up to 1.5 million customers, and a data breach at Harvard University has exposed 851,000 accounts. On the botnet front, Google has dismantled the XCPE botnet, which leveraged over 1.3 million devices for malicious activities. Additionally, ongoing exploitation of critical vulnerabilities, such as those in Siemens IoT devices and CryptoPayment Gateway plugins, underscores the urgent need for robust cybersecurity measures. The prevalence of AI in both attacks and defenses continues to shape the threat landscape, necessitating immediate action from organizations.
|
// AI-powered summary generated at 12:00
On July 14th, 2026, we received a submission for an Authentication Bypass vulnerability in User Profile Builder, a WordPress plugin with more than 40,000 active installations. This vulnerability makes it possible for unauthenticated attackers to log in as the user with ID 1, which is typically the s...
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. [...]
Another one bites the dust
ESET PROTECT Hub version 2.8.1 has been released.
IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced across users, applications, infrastructure, and non-human identities. This guide explains what IAM compliance requires, which regulations matter, and how organizations move...
L'Agence croate pour la protection des données personnelles (AZOP) a rappelé que le propriétaire d'un site internet est le responsable du traitement des données collectées via les cookies.En réponse à une sollicitation concernant l'utilisation de cookies, l'autorité a clarifié que le propriétaire d'...
L'autorité portugaise de protection des données, la Commission Nationale de Protection des Données (CNPD), a tenu une réunion avec l'Autorité Nationale des Communications (ANACOM) et l'Entité Régulatrice pour la Communication Sociale (ERC) concernant l'application du Règlement sur les Services Numér...
Apple warns users of credible, targeted attacks and urges immediate verification, stronger protections, and expert assistance. Apple has sent a new round of threat notifications to users it believes may have been singled out by mercenary spyware. The company told TechCrunch the latest alerts reached...
L'Autorité néerlandaise de protection des données, l'Autoriteit Persoonsgegevens (AP), annonce la tenue d'une journée portes ouvertes le 12 septembre 2026 afin de présenter ses missions au public.Cet événement, organisé à La Haye dans le cadre de la "Semaine de l'État de droit", permettra de mieux c...
L'Autorité Nationale hongroise pour la Protection des Données et la Liberté d'Information (NAIH) communique sur l'élargissement des obligations de transparence relatives aux fonds publics, suite à une modification législative.Une loi du 26 juin 2026, modifiant la loi sur la liberté d'information, ét...
The Debian Security Advisory DSA-6442-1 outlines several vulnerabilities in the util-linux package that could lead to privilege escalation, recommending users to upgrade to version 2.41.5-0+deb13u1.
L'autorité norvégienne de protection des données a émis une réprimande et des injonctions correctives à l'encontre d'une chaîne de salles de sport pour avoir imposé la prise d'une photographie de ses membres en se fondant sur une base juridique incorrecte et en ne respectant pas le droit d'oppositio...
Le Contrôleur européen de la protection des données (CEPD) a publié son avis 19/2026 sur la proposition de la Commission européenne visant à moderniser l'Agence de l'Union européenne pour la coopération judiciaire en matière pénale (Eurojust).Cette proposition de règlement, qui s'inscrit dans un paq...
This is a current list of where and when I am scheduled to speak:
I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is here.
I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026, at...
Courts sentence Com member for sextorting 117 minors, joint advisory warns of Gunra ransomware, and ShieldBreak bypasses MS Defender for SYSTEM access.
Compare the best remote collaboration tools for messaging, meetings, and project management.
The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents
Government disputes claims of continued access as investigators measure damage
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the upda...