> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape is marked by several significant threats and trends. A sophisticated North Korean hacking group has used fake employment schemes to execute a record $6.4 billion theft from Binance, highlighting the dangers of social engineering. UK officials have warned of imminent AI-powered ransomware attacks targeting critical infrastructure, predicting a surge in such incidents by 2028. Additionally, enterprises face financial losses of up to $1 million per day from LLMjacking attacks that exploit large language models for unauthorized cloud resource usage. Meanwhile, Google dismantled a massive botnet of 1.3 million Android TV boxes that was involved in ad fraud. Lastly, multiple vulnerabilities have been discovered across various platforms, including critical flaws in Node-RED and Siemens devices, necessitating immediate attention from IT security teams.
|
// AI-powered summary generated at 20:00
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
An extortion gang known for targeting transportation companies and private equity firms has taken credit for a breach at Uber Freight.
Israeli cyber firm Dream said the framework adapted mid-operation, corrected its mistakes and expanded as it went along.
The post Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan appeared first on CyberScoop.
Dans un avis, l'autorité danoise de protection des données a estimé qu'un responsable du traitement, ayant manqué à son obligation de suppression de données, pouvait néanmoins les conserver et les communiquer à un tiers, dès lors qu'une nouvelle finalité légitime, en l'occurrence la recherche scient...
L'Autorité polonaise de protection des données (UODO) a communiqué sur un incident de cybersécurité impliquant la société MyDr et a rappelé les démarches à suivre pour les personnes concernées par une violation de données.Suite à des rapports médiatiques sur un possible incident de cybersécurité et...
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges. [...]
Le ministère de l'Intérieur et de l'Administration polonais a répondu aux objections de l'autorité de protection des données (UODO) concernant la légalité de la collecte et de la conservation des données biométriques et génétiques des agents de police.En juillet 2026, le président de l'Autorité de p...
Le Contrôleur européen de la protection des données (CEPD) a émis son avis 17/2026 concernant la proposition de la Commission européenne visant à modifier le Règlement (UE) 2018/1725, qui régit le traitement des données personnelles par les institutions et organes de l'Union.La proposition vise à ha...
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]
L'autorité britannique de protection des données a prononcé une réprimande à l'encontre du Bureau des casiers judiciaires (ACRO) en raison de défaillances fondamentales en matière de cybersécurité, notamment une gestion des correctifs et une surveillance des alertes inadéquates, qui ont permis un ac...
This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.
Turn partial school badges into actionable leads with S21 School Badge Lookup v2.0, fast offline image intelligence built for CSAM and ICAC investigations worldwide.
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
The post SharePoint Vulnerability Exploited Shortly After PoC Release appeared first on SecurityWeek.
Update Zoom now to protect against critical vulnerabilities that could allow an attacker in the same meeting to run malicious code on your device.
Helix claims nearly a million files, while the logistics biz says operations never hit the brakes
New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call
An AI agent bypassed a gym's booking rules on its own. Here's how autonomous agents find security weaknesses and how to protect your business.
Read the latest DFIR news – NIST’s new ArtCat digital forensics catalog, Kohberger case methodology, Android intrusion log analysis, offline AI with BelkaGPT, and more.
A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash&#;x26;#;x5f;history"&#;x26;#;xc2;&#;x26;#;xa0;and collecting meaningful additional data. Our reader David commented...
The FBI warns that cybercriminals are targeting adults' and children's social media and other online accounts to steal sexually explicit images or videos. [...]