> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
L'Autorité polonaise de protection des données personnelles (UODO) a annoncé la poursuite de son initiative "L'UODO en tournée nationale" avec des visites prévues dans les voïvodies de Lublin et de Sainte-Croix.Cette campagne, lancée en septembre 2024, vise à sensibiliser les citoyens, les entrepris...
L'Autorité de protection des données belge a classé sans suite une plainte relative à la gestion des témoins de connexion (cookies), les faits initiaux étant prescrits. Elle a néanmoins profité de cette décision pour rappeler les exigences de validité du consentement, notamment l'obligation d'offrir...
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.
One of them, ZDI-CAN-33774, can be triggered before any network authentication. The...
Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
The post The Current Landscape of OAuth Attacks appeared first on Unit 42.
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
OpenVPN could allow unintended access to network services.
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018.
According to multiple reports from the Associated Press, the New York...
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Avec l'application Tiny11 Builder, il devient facile de créer une image Tiny11 allégée adaptée aux ordinateurs vieillissants et incompatibles avec Windows 11.
Le post Tiny11 Builder : créez un Windows 11 allégé facilement, sans toucher à PowerShell a été publié sur IT-Connect.
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]
It was discovered that OpenVPN incorrectly handled certificate subject
fields. A remote authenticated user could possibly use this issue to
impersonate other users.
What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling.
Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic.