> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several critical threats and vulnerabilities. Two major PHP bugs, termed the "PHP-ocalypse," posed significant risks to web applications, emphasizing ongoing software security challenges. The emergence of the BlackX UEFI bootkit demonstrates how attackers exploit older vulnerabilities, such as the Baton Drop flaw, to bypass security measures. Additionally, a memory-corruption issue in Google's Brotli decoder affects multiple programming environments, raising concerns for developers. A data breach at Capcom exposed 11.7 million email addresses, while CISA added critical flaws in Collabora Online and Arista VeloCloud to its vulnerability catalog. Lastly, AI's role in discovering and exploiting bugs underscores the need for vigilance as cyber threats evolve.
|
// AI-powered summary generated at 16:00
L'association None of Your Business (noyb) a publié son rapport annuel pour 2025, qui détaille ses actions juridiques, ses travaux politiques et les décisions obtenues au cours de l'année.En 2025, l'organisation a initié les préparatifs pour son premier recours collectif visant l'agence de notation...
La Commission Nationale de la Protection des Données (CNPD) du Portugal a participé à un atelier européen portant sur les méthodologies d'évaluation d'impact des systèmes d'intelligence artificielle.La CNPD a pris part à la 24ème réunion des Autorités de Surveillance de la Protection des Données d'E...
Learn how SOC audits work, the difference between SOC 1 vs SOC 2 compliance, and what type you need.
Le Comité européen de la protection des données (CEPD) a publié une déclaration sur les défis que représentent les lunettes intelligentes pour la protection des données.Le CEPD a adopté cette déclaration lors de sa plénière, accompagnée d'un rapport intitulé "Le regard connecté. Enregistrement vidéo...
Une autorité publique ne peut se fonder sur une obligation légale de transparence pour publier des données personnelles si les actes concernés ne sont pas explicitement visés par la loi, un tel traitement étant alors dépourvu de base légale et justifiant l'exercice du droit à l'effacement.Faits et c...
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python clien...
Dans une décision sanctionnant deux sociétés pour un total de 155 000 €, l'Autorité hellénique de protection des données analyse en détail les manquements liés à l'utilisation secondaire d'images de vidéosurveillance à des fins judiciaires et à l'obstruction délibérée du droit d'accès d'une personne...
In an extremely disappointing ruling, a California trial court dismissed SIREN v. San Jose, our case challenging the city of San Jose’s warrantless searches of its vast stores of Automatic License Plate Reader (ALPR) data. EFF and the ACLU of Northern California represent SIREN and CAIR California,...
Anthropic took more than two months to alert cops
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek.
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.Â
The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek.
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials.
"Your configuration becomes vali...
Participants said it was the largest joint scam operation to date and the first focused on the region.
The post West African scammers targeted in joint international government-industry operation appeared first on CyberScoop.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.