> TODAY'S SUMMARY (14 articles)
Today's cybersecurity landscape highlights several critical threats and developments. Debian has issued advisories for significant vulnerabilities, including an authentication bypass in ruby-rack-session and multiple denial-of-service and arbitrary code execution vulnerabilities in Wireshark. The FBI is making progress against the ShinyHunters group with the arrest of a suspect in Jordan who is cooperating with investigators. Additionally, the China-aligned cyber espionage group TA419 is targeting U.S. AI policy experts with sophisticated credential phishing attacks. Meanwhile, Warlock ransomware continues to exploit unpatched SharePoint vulnerabilities to attack critical infrastructure globally. These incidents underscore the ongoing challenges posed by advanced persistent threats and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 20:00
Denis Obrezko accused of orchestrating cyberattacks that compromised at least 11 U.S. companies as part of the Kremlin-linked group's sprawling espionage operation.\
The post Russian national charged in connection with Void Blizzard espionage campaign appeared first on CyberScoop.
L'autorité espagnole sanctionne un éditeur de presse pour avoir diffusé une vidéo identifiant un mineur et une victime, jugeant que l'intégration de contenu tiers constitue un traitement de données soumis au principe de minimisation, même au nom de la liberté d'information.Faits et contexteL'autorit...
Traitement illicite de données sensibles (préférences sexuelles), manquement à l'obligation de transparence et absence de mesures de vérification de l'âge sur un site internet destiné aux adultes.Faits et contexteL'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision d...
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various ransomware-as-a-service (RaaS) schemes like LockBit (aka Tenacious Mantis...
L'autorité britannique de protection des données (ICO) a publié ses lignes directrices finalisées concernant les produits et services de l'internet des objets (IoT) destinés aux consommateurs, clarifiant ses attentes en matière de conformité.Ces lignes directrices, issues d'une consultation de douze...
An amendment by Sen. Kirsten Gillibrand (D-NY) to the chamber’s fiscal 2027 national defense authorization bill that would have created the digital-focused service was defeated 14-13 when the Senate Armed Services Committee took up the nearly $1.2 trillion legislation behind closed doors this week.
Ubuntu Kylin Software Center could be made to run programs as an administrator if it received specially crafted input via its D-Bus service.
"AI can make mistakes" isn't a good enough legal defense for defamatory or incorrect AI Overviews, a German court has ruled.
A joint congressional report describes a spam operation that turned tens of thousands of fake podcasts into search-engine bait for illegal pharmacy and scam sites.
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a Binding Operational Directive that will change how the US federal government approaches vulnerability management. The directive arrives as the patching problem has become nearly unmanageable, driven by a surge in newly publi...
No disclosure via official channels, no offer of identity theft monitoring, no problem
Automatisez la gestion et le déploiement de vos applications dans Microsoft Intune avec Robopack. Gagnez un temps précieux au quotidien.
Le post Intune + Robopack : le combo idéal pour automatiser la gestion des applications a été publié sur IT-Connect.
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million. [...]
The FROST technique: using an SSD in a roundabout way to leak private information.
Guide complet pour maîtriser la gestion des paquets avec APT sous Linux : apt update, install, upgrade, remove et toutes les commandes essentielles sous Debian.
Le post Maîtriser la gestion des paquets avec APT sous Linux a été publié sur IT-Connect.
Most extortion gangs hide behind a keyboard. Silent Ransom Group will phone your staff pretending to be IT support - and if that fails, send someone to your office in person to plug in a USB stick.
Read more in my article on the Fortra blog.
Mistral could be made to expose sensitive information or run code.
Great Marlow School, which has 1,428 pupils according to the Department for Education (DfE), said it was set to remain closed while it works with specialist IT and cybersecurity professionals to resolve the issue.
It was discovered that Ubuntu Kylin Software Center incorrectly
handled user-supplied input in its D-Bus service. A local attacker
could possibly use this issue to gain administrative privileges.
Denis Obrezko, 36, made his initial appearance in federal court in Boston on Tuesday after being transferred to U.S. custody from Thailand, where he was arrested last November.