Citrix is urging its NetScaler ADC and NetScaler Gateway customers to quickly patch two critical security holes, one involving a memory overflow vulnerability leading to unpredictable behavior or denial of service, and the other allowing authentication bypass.
Citrix said i...
As firewall rule sets grow in complexity, security teams face a common challenge: manual log analysis is used to determine which rules are actively matching traffic and which are consuming capacity without being triggered. This lack of visibility creates operational and compliance gaps. Organization...
Kyle Spitze led an offshoot of the violent extremist collective and victimized dozens of girls, coercing them to degrade themselves under threats of doxing and swatting.
The post Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist appeared first on...
Debian has fixed a vulnerability in the SABnzbd+ web UI that allowed password protection to be bypassed, advising users to upgrade to version 4.5.0+dfsg-1+deb13u1.
Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline. ThreatFabric’s Mobile Threat Intelligence team has identified a new Android malware, dubbed Manic, which has been active in the wild since at least February 2026. The resear...
In this week's newsletter, new author Mick Baccio introduces himself and explores the operational and security implications of the new White House memorandum regarding private sector participation in government-authorized offensive cyber operations.Â
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. [...]
OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison details the timeline. It’s really interesting to read through—and really impressive cyberoffense work.
NSA, CISA, FBI, DOE, and EPA warn of active AI-assisted attacks against Siemens S7 PLCs across US critical infrastructure sectors. Five U.S. federal agencies issued a joint advisory this week warning of an active hacking campaign against Siemens S7 Series programmable logic controllers. The advisory...
In a letter on Wednesday, Sens. Marsha Blackburn (R-TN) and Richard Blumenthal (D-CT) criticized the company for having “knowingly withheld a critical safety measure for millions of American users."
Follow the money
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.
Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-...
Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.
La Commission de protection des informations personnelles (PIPC) de Corée du Sud a annoncé l'adoption par l'Assemblée nationale d'un amendement à la Loi sur la protection des informations personnelles, instaurant une dérogation pour l'utilisation de données à caractère personnel dans le développemen...
L'Autorité de protection des données néerlandaise (AP) recommande aux utilisateurs de la plateforme Twitch de désactiver une option de partage de leurs données personnelles destinées à l'entraînement des modèles d'intelligence artificielle d'Amazon.Twitch, une filiale d'Amazon, a informé que les don...
The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts.
The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and c...
L'autorité espagnole a archivé une procédure concernant une caméra de vidéosurveillance installée par un particulier, estimant qu'aucune infraction affectant le contenu essentiel du droit à la protection des données n'était établie, notamment en raison d'un contexte de conflit de voisinage et du ret...
La Commission européenne a lancé une consultation publique dans le cadre de la seconde évaluation de la directive 2016/680, dite "directive police", et l'autorité polonaise de protection des données encourage les parties prenantes à y participer.Conformément à l'article 62 de la directive 2016/680,...
Le parquet néerlandais annonce que l'institut forensique a ouvert le smartphone Google Pixel d'un suspect, de quoi relancer certains débats.
Le post Le NFI a déverrouillé un Google Pixel dans une affaire criminelle néerlandaise a été publié sur IT-Connect.
L'autorité norvégienne de protection des données (Datatilsynet) annonce sa participation au Festival de la Sécurité 2026, où elle tiendra une conférence sur les risques liés à l'usage non maîtrisé des agents d'intelligence artificielle.L'événement se déroulera du 24 au 26 août à Lillehammer, et l'au...