[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (78 articles)

|

// AI-powered summary generated at 16:00

> Enterprise passkey security under threat from malware
Given the widespread enterprise adoption of passkeys to replace passwords, a Palo Alto Networks Unit 42 report disclosing ways attackers are getting around passkey protections is concerning, analysts say, but they stress that the demonstrated attacks can only happen after a su...
> Report: Passkey security issues could allow account takeover
Given the widespread enterprise adoption of passkeys to replace passwords, a Palo Alto Networks Unit 42 report disclosing ways attackers are getting around passkey protections is concerning, analysts say, but they stress that the demonstrated attacks can only happen after a su...
> Inter-Con Security - 276,114 breached accounts
In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompasse...
> OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts
Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unauthorized Amazon purchase.
> A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.
> Cloudflare is the only vendor named a Visionary in 2026 SASE and SSE reports
We're honored to announce that Cloudflare is the only vendor that has been recognized as a Visionary in both the 2026 Gartner® Magic Quadrant™ for SASE Platforms and the 2026 Gartner® Magic Quadrant™ for Security Service Edge reports.
> Smashing Security podcast #479: How a fake police officer nearly stole Graham’s cryptocurrency
Graham gets a phone call from the police. Well, someone who sounds convincingly like the police. There's just one small problem: what they really want is the 24-word seed key to Graham's cryptocurrency wallet. Meanwhile, if you've stayed in a hotel recently, the free Wi-Fi you connected to might...
> Ransom Cartel ransomware creator sentenced to 16 years in prison
Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide. [...]
> Security validation should begin where attackers begin
Modern attacks increasingly begin with the web application. Customer portals, partner platforms, APIs, external business applications, and AI-powered services have become the front door to the enterprise. The systems organizations build to create value are now the same syst...
> Canadian pleads guilty to Snowflake cloud data-theft attacks
A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of dollars from victims. [...]
> Oracle Linux 7 Kernel Important Security Update ELSA-2026-500121
Oracle Linux 7 has received kernel updates addressing multiple security vulnerabilities, including fixes for KVM-related issues and XFS data handling, along with updates for NIC and net scheduling.
> Oracle 8 fence agents Advisory ELSA-2026-49927 for CVE-2026-44431
Oracle Linux 8 has released updated RPMs for various fence agents to fix CVE-2026-44431, improving security and addressing identified vulnerabilities.
> Why security validation must follow the attack path
For years organizations have strengthened their security posture by investing in specialized tools for applications, identities, endpoints, networks, and cloud infrastructure. Those investments remain essential, but the way attackers operate has changed dramatically. Today’s a...
> Oracle Thunderbird Significant Revision ELSA-2026-49922
Oracle Linux 8 has updated Thunderbird package versions to address multiple CVEs, which include security fixes and configuration changes, available for both x86_64 and aarch64 architectures.
> Oracle ELSA-2026-49520 ldns Important DNS Source Validation Issue
Oracle Linux 8 has received updates to the ldns package, addressing CVE-2026-10846 by improving DNS response validation and including several related rpm versions for various architectures.
> Prompt injection isn't the bug, AI agent frameworks are
Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat attendees what they found
> Oracle mingw-glib2 Important Buffer Overflow Issues ELSA-2026-49512
Oracle Linux 8 updates include fixes for multiple CVEs related to glib2 packages, addressing various vulnerabilities such as buffer overflows and integer overflows to enhance system security.
> Snowflake hacker pleads guilty, faces up to 32 years in prison
Connor Moucka obtained almost $500,000 for playing a key role in one of the most widespread and damaging cyberattack sprees on record. The post Snowflake hacker pleads guilty, faces up to 32 years in prison appeared first on CyberScoop.
> AWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows
Customers have access to models that are continuously getting better with each new generation bringing larger context windows, stronger reasoning, and lower token costs. Getting the strongest AI-powered security will come from tools that combine the most relevant models with deep knowledge of a cust...
> Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says
Three Chinese telecommunications giants continue to have footholds in the U.S. internet ecosystem despite their alleged role in previous Chinese hacking campaigns, a House committee report concluded.