> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
The new British prime minister is retaining Liz Lloyd in a cyber policy role, making her one of the few Keir Starmer allies remaining in government.
Learn how to create a data retention policy for your SMB, including GDPR storage limitation, UK recordkeeping rules, and access controls.
On some websites, agents can read your messages before you even send them. We explain how these tracking mechanisms work, what data sites collect, and why this can be a risk.
Bonjour à toutes et tous, Cette semaine, l’actualité cyber se concentre sur l’automatisation de l’extorsion, les fuites revendiquées et la pression exercée sur les organisations. Titan promet d’analyser les données volées et de calculer les rançons, tandis qu’Anubis menace Coca-Cola via Fairlife et...
There are more reports than ever before of strong-arm tactics like home invasions and kidnappings against cryptocurrency holders, researchers say.
Deux jeux d’été mêlent fact-checking, détection IA et chiffrement pour entraîner l’esprit critique en famille.
Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing IP routes from more devices than intended, disrupting Azure and Microsoft 365 services. [...]
Is Malwarebytes legit? Yes: but it doesn't offer full antivirus protection. Here's what it does, what it misses, and what fills the gap.
Other signatories of the letter include Meta, Palantir, Perplexity, Mistral, NVIDIA, Mozilla, The Linux Foundation, Hugging Face, Dell Technologies and IBM.
The post Microsoft, tech companies throw weight behind spread of open-source AI appeared first on CyberScoop.
Barbhack, DEF CON, Cyberbrew et Hackfest rythment la rentrée cyber, de Toulon à Québec, en passant par Lille.
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns designed to deliver malware.
"BlueNoroff has...
Is Venmo safe? Yes, provided you use it as intended. Learn how it works, the common scams to watch for, and how to protect your money.
Scammers are using stolen videos and fake artist profiles to trick people into buying resin art that never arrives. Here's how to spot the warning signs.
A phishing site posing as a free Call of Duty Points giveaway is stealing Activision logins and two-factor authentication codes.
Titan promet d’automatiser l’analyse des fuites, le calcul des rançons et la pression réglementaire.
An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means.
Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webmail espionage campaign, Stadler Rail ransomware extortion attempt.
The post In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws...
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.
They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replicatio...
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile app between June 17 and June 19. [...]
Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trust hallucinated package, repo, or domain names. ActiveState explains how pre-fetch verification and governed dependency management can help stop these attacks before malic...