L'autorité espagnole sanctionne une société pour ne pas avoir respecté une injonction antérieure lui ordonnant de formaliser sa relation avec un prestataire. La société a tenté de requalifier la relation en coresponsabilité, a fourni des informations contradictoires et a omis d'informer l'autorité d...
It was discovered that curl incorrectly handled reusing connections
when the origin changed between transfers. A remote attacker could
possibly use this issue to obtain sensitive information.
Your location isn't just a pin on a map—it can expose some of the most intimate details about your life. The value of this information to advertisers and others has turned the location data business into a multi-billion dollar industry. In our latest EFFector newsletter, we're covering a new EFF rep...
We explain how to avoid becoming a victim of IP camera surveillance at home or while traveling, and how to properly configure a home video surveillance system.
CEO apologizes for police misuse as activists call for vandal action against license plate cameras
In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets, remote timers, achieving co-location and how new defenses further harden Cloudflare Workers.
Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly
handled negative Content-Length values or excessively large chunk sizes
when processing HTTP messages. An attacker could possibly use these
issues to cause HTTP messages to be interpreted inconsistently,
resulting in HTTP request or...
After her prison sentence for felony election-related crimes was commuted, Peters is poised to once again administer critical election duties.
The post A California county wants to hire Tina Peters to help run its elections appeared first on CyberScoop.
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations. [...]
Google is changing the Gmail spam filter, letting political emails reach your inbox. Learn how to stop campaign spam and take back control.
The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects
With the new Advanced Flow for sideloading being rolled out, it's time to discuss what sideloading is and how to do it more safely.
eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra
When every file is treated as equally urgent, critical intelligence can get lost in the backlog. See how S21 VisionX helps investigators prioritise what matters most.
Depuis le 18 août 2026, Microsoft Defender plantait en fin d'analyse sur Windows 10 et 11. Microsoft a confirmé le bug et l'a corrigé via une mise à jour.
Le post Votre analyse Defender s’arrêtait à 80 % sur Windows ? Microsoft a corrigé ce bug ! a été publié sur IT-Connect.
The data theft extortion group likely compromised a critical vulnerability affecting PTC’s product lifecycle management software in June, a month before it sent threatening emails to victims.
The post The long tail of Clop’s PTC hack is just beginning to emerge appeared first on CyberScoop.
Cloud providers typically expose a REST API at 169.254.169.254 that allows code running on virtual machines to retrieve machine-specific data. Some of the data is more or less harmless, such as the region the machine is running in or its MAC and IP addresses. However, the service may also be used to...
Thunderbird 154 active la prise en charge de Microsoft Graph pour les comptes Microsoft 365, à six semaines du blocage d'EWS. Le point sur les nouveautés.
Le post Thunderbird 154 active Microsoft Graph pour les comptes Microsoft 365 a été publié sur IT-Connect.
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. [...]
Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections