> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Lessons from the OpenAI-Hugging Face breach
De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un déni de service.
De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
A global law enforcement crackdown has seized infrastructure serving the massive phishing-as-a-service (PhaaS) group Kratos, as well resulting in the arrest of an unnamed Kratos âdeveloper and technical administratorâ in Indonesia.Â
The effort was managed by German law enfo...
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
A Russian intelligence-linked hacker is arrested in Thailand while enjoying a beach holiday - and the trail of evidence that nailed him to the Russian government includes 14 separate orders of chicken McNuggets.
Meanwhile, AI music generator Suno has been hacked - and the stolen data appears to s...
Stadler Rail said it will not make a $12.3 million ransom payment after cybercriminals stole technical data from a supplier's file-sharing platform.
Legal intern Suzanne Castillo was the principal author of this post.
The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed an amicus brief, alongside the national ACLU, its Maryland, North Carolina, South Carolina, and Virginia affiliates, and the N...
Qualys disclosed CVE-2026-8933, a high-severity Ubuntu flaw that lets local attackers gain root privileges through a race condition in snap-confine. Qualys has disclosed a high-severity local privilege escalation vulnerability, tracked as CVE-2026-8933Â (CVSS score of 7.8), affecting default installa...
Debian released a security advisory for BIND9 highlighting multiple vulnerabilities that could lead to DNSSEC validation bypass and other security issues, urging users to upgrade to the latest version.
The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]
Adobe patched CVE-2026-48294, a flaw in Adobe Acrobat Chrome extension that could let attackers steal WhatsApp Web chats by luring users to a webpage. Guardio Labs researcher Shaked Biner disclosed HermeticReader, a vulnerability chain in the Adobe Acrobat Chrome extension that allowed any attacker-...
Debian's advisory DSA-6394-1 highlights multiple vulnerabilities in firefox-esr, urging users to upgrade to version 140.13.0esr-1~deb13u1 to mitigate risks such as code execution and privilege escalation.
The Government Accountability Office looked at 117 rules across 37 agencies and found 70% had reporting requirements that were overlapping.
The post Most federal cybersecurity reporting rules are duplicative, study finds appeared first on CyberScoop.
A 10-year renewal of the cybersecurity information-sharing law known as CISA 2015 passed as part of the House's fiscal 2027 defense authorization bill.
Sean Gilligan discovered that AIOHTTP did not properly limit memory
usage when processing HTTP headers and trailers. An attacker could
possibly use this issue to consume excessive system resources, resulting
in a denial of service. (CVE-2026-22815)
It was discovered that AIOHTTP did not properly li...
Le Parlement français a adopté une loi visant à interdire l'accÚs aux services de réseaux sociaux en ligne aux mineurs de moins de quinze ans.Adoptée le 21 juillet, cette loi impose aux plateformes de réseaux sociaux d'interdire l'accÚs à leurs services aux mineurs de moins de 15 ans. La définition...
La Cour de justice de l'Union europĂ©enne a jugĂ© que la publication en ligne des noms d'athlĂštes professionnels ayant enfreint les rĂšgles antidopage peut ĂȘtre compatible avec le droit de l'Union, Ă condition qu'une mise en balance des intĂ©rĂȘts soit possible avant la publication et que le principe de...