> TODAY'S SUMMARY (82 articles)
Today's cybersecurity news highlights several significant threats and trends. A Californian individual has been accused of illegally exporting $300 million worth of Nvidia chips to China, potentially aiding advancements in AI technology. The U.S. Treasury has sanctioned members of the Tren de Aragua gang linked to ATM jackpotting attacks, emphasizing ongoing concerns over organized cybercrime. A critical zero-day vulnerability in Fortinet's FortiMail is actively being exploited, prompting urgent patching efforts. Additionally, AI agents are increasingly being used in cyberattacks, including SQL injection attempts against government websites. The rise of AI in both offensive and defensive roles continues to shape the cybersecurity landscape, with Microsoft warning that attackers are gaining significant advantages through AI.
|
// AI-powered summary generated at 16:01
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. [...]
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 4 juin 2026.
Partie I (avec débats): :
* Présentation des résultats de l’enquête « DPO et IA » par des représentants du ministère du Travail (DGEFP) et de l’AFPA ;
* Comm...
L'autorité suédoise a prononcé une réprimande à l'encontre de la police pour un manquement à son obligation d'information des voyageurs dans une zone de contrôle aux frontières, l'information n'étant disponible que sur son site internet sans aucun renvoi sur place.Faits et contexteL'autorité suédois...
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.
According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legit...
L'autorité suédoise de protection de la vie privée (IMY) commente une décision de la Cour suprême des États-Unis susceptible d'affecter la validité de la décision d'adéquation pour les transferts de données vers ce pays.La Cour suprême des États-Unis a jugé, dans l'affaire "Trump v. Slaughter", qu'u...
L'autorité polonaise de protection des données (UODO) a présenté un projet pilote de certification pour les spécialistes de la protection des données, développé par le Réseau Scientifique et Académique Informatique - Institut National de Recherche (NASK).Ce programme, présenté le 2 juillet 2026, s'a...
In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical addresses, phone numbers, dates of birth and other information relating to donors, su...
L'autorité hellénique de protection des données a sanctionné un fournisseur d'énergie et une banque pour des manquements liés à la gestion d'ordres de prélèvement et au non-respect du droit d'accès, soulignant la responsabilité de chaque acteur dans la chaîne de traitement.Faits et contexteL'autorit...
Le ministère du Travail et des Solidarités, l’Association française des correspondants à la protection des données (AFCDP) et la Commission nationale de l'informatique et des libertés (CNIL) ont publié les résultats d’une étude de 2025 portant sur l’évolution du métier de délégué à la protection des...
Microsoft users have been hit by a massive, automated password spray attack.
Among those targeted by the attack were clients of security company Huntress. It reported that the attackers made 81 million attempts to log into its customers’ accounts between June 12 and 26 — an...
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting.
The post In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM...
Third-party contractor compromise exposed health information and insurance billing passwords
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...]
Adobe will now issue security patches for its products twice as often to deal with the increasing pace of software vulnerability discovery and exploitation.
This follows Oracle’s decision to increase its quarterly patch program to a monthly one.
Adobe issues patches on t...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.