> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.
Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authoriti...
Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT.
Oracle Linux updated its kernel packages for version 10 to address multiple security vulnerabilities, introducing enhancements such as new driver signing certificates and fixes for identified CVEs.
Oracle Linux has released updated Java 25 RPM packages for version 10, addressing several CVEs and including various updates and changes to dependencies and documentation.
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS...
Oracle Linux 9 has released updated RPMs addressing multiple CVEs, including kernel improvements, module signing updates, and various bug fixes to enhance system security and functionality.
Oracle Linux 10 has updated nodejs24 packages to version 24.18.0, addressing multiple CVEs and improving security, with rpms available for x86_64 and aarch64 architectures.
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report.
Researchers track the operation as CaptiveCrunch and attribute it to Storm-2...
Oracle Linux has released updated RPMs for version 8, addressing CVEs 2026-55653 and 2026-55655, which fix security vulnerabilities in OpenSSH affecting both x86_64 and aarch64 architectures.
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last...
Test du DXRacer Martian, le fauteuil gaming haut de gamme : dossier motorisé, support lombaire, assise chauffante et ventilée, et confort au quotidien.
Le post Test du DXRacer Martian, le fauteuil gaming électrique haut de gamme a été publié sur IT-Connect.
Debian has released advisory DSA-6408-1 addressing multiple vulnerabilities in Chromium that could lead to code execution, denial of service, or information disclosure, urging users to upgrade.
La société Daisen a annoncé qu'un accès non autorisé à son système avait été détecté. L'incident, qui a débuté vers 2h du matin le 1er août, a entraîné une infection par un logiciel malveillant. Suite à la détection, l'entreprise a coupé tous ses systèmes internes, ce qui a affecté ses opérations de...
Le samedi, les sites web de 10 départements de l'état d'Uttarakhand, dont le Fonds de secours du chef du gouvernement (CM Relief Fund), ont été victimes d'une attaque par logiciel malveillant (malware). L'attaque a forcé la fermeture des sites. Après plusieurs heures d'efforts, l'ITDA a réussi à rét...
Running a website means a single unpatched vulnerability can take it offline, harm your reputation, or require cleanup. Most compromises begin with automated attacks exploiting known software flaws, usually reported and disclosed already.
To keep you protected from these threats, we’ve compiled this...
La ville de Norcross (Géorgie) a été victime d'une cyberattaque par ransomware qui a affecté certains de ses systèmes informatiques au début du mois d'août. Les autorités ont fait appel à des experts externes en cybersécurité et ont prévenu les résidents que des perturbations limitées pourraient enc...
Le Metro de Panamá a confirmé la détection d'un incident de cybersécurité dans une partie de son infrastructure technologique. L'institution a activé ses protocoles de réponse pour contenir les éventuelles affectations et mène une enquête technique pour déterminer l'étendue de l'incident.
Oracle released updated RPMs for Oracle Linux 10 addressing CVE-2026-16615, which concerns weak random number generation in PKCE implementation. Available for x86_64 and aarch64 architectures.
La Ville de Gagny a subi une cyberattaque ayant affecté une partie de son système d’information. Des personnes non autorisées ont pu accéder à certaines données personnelles des administrés, notamment nom, prénom, adresse, coordonnées téléphoniques et électroniques, ainsi que des informations admini...
Les autorités polonaises enquêtent sur une cyberattaque visant la chaîne de magasins Zabka. L'incident, survenu au début du mois d'août, concernait un accès non autorisé à certains systèmes informatiques utilisés pour l'échange d'informations entre le franchisé et le franchisé. L'attaque, attribuée...