> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Learn how to forward emails in Gmail, Outlook, Yahoo, and Proton to unify your inboxes. Only one of these can't technically scan your emails.
Hackers recently obtained non-sensitive customer information and other documents from the company.
The post Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses appeared first on SecurityWeek.
Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obt...
USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was
discovered that for Ubuntu 18.04 LTS, during the update preparation
phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was
incorrectly dropped. This update reintroduces the fix for
CVE-2014-0114 and CVE-2019-10086.
We apol...
Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or Edge on the victim machine and controls it through Chrome DevTools Protocol, a debu...
Reconstruct Synology SHR and SHR-2 automatically, browse evidence before imaging, and acquire only the files you need with Atola TaskForce 2.
Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets
Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.
The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.
The government spent the past two decades learning what private sector partners have always known: cyber resilience requires everyone in the room. ANCHOR-CI is proof that the lessons may finally stick.
The post ANCHOR-CI could fix 20 years of broken government-industry collaboration appeared first o...
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video.
The selfie for sign-in, per the tech giant, is another option on top of existing recovery methods to log in to an account, including an email address or a phone number. The idea is to...
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]
He replaces Guy Rosen, who announced his retirement from the company after 13 years.
The post Assaf Keren Appointed New CISO of Meta appeared first on SecurityWeek.
The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. “This change will protect Python users and reduce the amount of “cleanup” wo...
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday. [...]
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.
The post New Check Point Zero-Day Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Microsoft va faire des passkeys la méthode par défaut dans Entra ID et retire l'authentification par SMS et appel vocal. Calendrier, impact et alternatives.
Le post Microsoft 365 : la fin de l’authentification MFA par SMS et appel au profit des passkeys a été publié sur IT-Connect.
Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Stadler operates 16 production and component plants and eight engin...
Cloudflare a analysé le trafic HTTP mondial pendant la Coupe du monde 2026. Décalage horaire, streaming, paris en ligne : voici ce que révèlent ses données.
Le post Coupe du monde 2026 : comment Cloudflare a vu le Mondial redessiner le trafic Internet a été publié sur IT-Connect.
En moins d'une semaine, Joshua Boniface, Anthony Lavado et Andrew Rabert ont quitté Jellyfin. Burn-out, code IA, gouvernance : ce que l'on sait.
Le post Open Source – Jellyfin : trois départs majeurs, entre burn-out et tensions autour de l’IA a été publié sur IT-Connect.