> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
L'autorité britannique de protection des données (ICO) a publié une série de rapports et de recherches portant sur les perceptions du public et les enjeux liés aux nouvelles technologies.Un rapport conjoint avec le Centre pour l'intelligence collective (CCI) de Nesta, financé par le Département pour...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a organisé un webinaire pour présenter sa recommandation sur les pixels de suivi aux fournisseurs et prestataires de services.Ce webinaire, qui s'est tenu le 4 juin 2026, ciblait spécifiquement les entreprises proposant des services de...
Business email and collaboration suite Zimbra has received a major security update that fixes several critical issues that could allow attackers to execute malicious code on the server or in users’ browsers.
Available in commercial and open-source editions, Zimbra Collabora...
L'autorité polonaise de protection des données (UODO) a organisé une conférence portant sur les interactions entre le RGPD, la directive NIS2 et le système national de cybersécurité (KSC).Le 20 juillet, une conférence organisée par l'autorité polonaise de protection des données (UODO) a réuni près d...
L'autorité italienne de protection des données a sanctionné une société d'information commerciale pour avoir fourni des réponses incomplètes aux demandes d'accès des personnes concernées, en omettant de communiquer le score de risque qui leur était attribué ainsi que la logique de son calcul.Faits e...
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats. [...]
The observed incidents include “malicious project file interactions and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays,” the advisory says.
OpenAI made a mistake setting up what it called a “highly isolated” testing environment and sandbox. According to cybersecurity experts, that human mistake is what made the AI-powered attack on Hugging Face possible.
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more.
Reports filed before that date, including those alrea...
Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to PeopleSoft, GoldenGate, Java SE, and Fusion Middleware.
Fusion Middleware was particularly hard hit, wi...
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment.
The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8),...
Both houses of the French Parliament voted to block social media access for children under 15, making France the first European country to enact a ban amid a broadening global crackdown.
Several security issues were fixed in Exim.
This isn&#;x26;#;39;t a new attack, but something I saw "pop-up" in our logs this week:
The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown.
The post Malware is targeting AI tools in software development environments appeared first on CyberScoop.
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers. [...]
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
It was discovered that Exim incorrectly handled certain command line
options. A local attacker could possibly use this issue to access files
outside of the spool area.
It was discovered that Exim incorrectly handled string expansion in
.local files. A local attacker could possibly use this issue to...
Cisco has revealed a family of open-weight AI models called Antares that, it said, can help security teams isolate potentially vulnerable parts of a software repository before deeper investigation begins.
Rather than detecting a specific CVE or generating a patch, these mod...
A North Korean advanced persistent threat (APT) group recently targeted vendors of collaborative-work software, South Korean researchers said.