> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Le 14 juillet 2026, à l'occasion de sa mise à jour mensuelle, Microsoft a publié, entre autres, des correctifs pour deux vulnérabilités critiques affectant SharePoint. Les vulnérabilités CVE-2026-50522 et CVE-2026-58644 permettent à un attaquant non authentifié d'exécuter du code arbitraire à ...
Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia. [...]
The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.
At the time, Hugging Face said it wasn’t clear which LLM was used in the attack. OpenAI confirmed it was one of their models being tested for “maximal” cyber capabilities.Â
The post OpenAI says model test was behind Hugging Face hack appeared first on CyberScoop.
A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. [...]
Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft SharePoint vulnerability, tracked as CVE-2026-50522 (CVSS score of 9.8), is being actively exploited following the release of a public proof-of-concept (PoC...
AccountsService could be made to run programs as an administrator if it opened a specially crafted file.
Don't call them chatbots
Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]
Trust but verify doesn't work when verification is difficult
USN-8580-1 fixed vulnerabilities in AccountsService. This update provides
the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that the Ubuntu-specific SetLanguage patch to
AccountsService incorrectly...
New research from the UK shows how nearly every model tested tried to cheat, scam or cut corners on its way to solving problems.
The post AI models keep getting caught cheating appeared first on CyberScoop.
L'autorité italienne de protection des données a sanctionné un fournisseur d'énergie pour l'utilisation illicite de données de solvabilité à des fins d'amélioration de ses modèles d'évaluation et pour des manquements en matière de transparence et de droits des personnes concernées.Faits et contexteL...
L'autorité italienne de protection des données a sanctionné un fournisseur d'énergie à hauteur de 5,8 millions d'euros pour avoir illégalement utilisé les données de solvabilité de plus d'un million de personnes afin d'affiner ses modèles internes de notation, et pour avoir fourni des réponses incom...
By a party-line vote, the Senate Intelligence Committee sent the nomination of Jay Clayton to lead ODNI to the Senate floor.
Several security issues were fixed in ImageMagick.
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 21 juillet 2026.
Partie I (avec débats): :
* Examen d’un projet de délibération portant avis sur un projet de décret portant autorisation d’un traitement dénommé « CLEM »....
Several security issues were fixed in jbig2dec.
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom. [...]
Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees.
404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a yea...