> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's designed to rig live game results on Digitain.
The package, named "Newtonsoftt.Json.Net," masquerades as the Newtonsoft.Js...
An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances during authorized penetration tests. The firm pub...
OpenAI says its AI models, including GPT‑5.6 Sol and a pre-release model, hacked into the Hugging Face artificial intelligence repository while being tested in a sandboxed testing environment. [...]
Des détectoïdes de test publiés par erreur ralentissent la synchronisation WSUS. Microsoft déploie un correctif et détaille un nettoyage manuel des serveurs.
Le post WSUS : Microsoft publie un correctif manuel contre les lenteurs et timeouts de synchronisation a été publié sur IT-Connect.
Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilitie...
A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds.
The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of...
Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past ye...
OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an "even more capable pre-release model," was behind the security incident that targeted Hugging Face's production infrastructure last week.
The AI company said the models were operating with...
Face à Apple, le reconditionné s’impose en France: prix attractifs, 32 points de contrôle et politique garantie efficace. Voici pourquoi c'est un bon choix.
Le post Faites une bonne affaire en 2026, achetez un iPhone reconditionné a été publié sur IT-Connect.
Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. To what extent do the follow...
Sandboxed experiment found itself a zero day, escaped onto the open internet and stole data
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available fo...
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New libssh packages are available for Slackware 15.0 and -current to fix security issues.
Brinks Home a signalé une cyberattaque ayant permis de s'infiltrer dans ses systèmes informatiques et a fait état d'un chantage implicite, les pirates menaçant de divulguer les informations dérobées. L'entreprise a mis en œuvre ses plans d'intervention et mené une enquête informatique, qui n'a toute...
L'arrondissement d'Anjou a été victime d'une cyberattaque qui a affecté ses services à la population, notamment les services de téléphonie. L'intrusion a eu lieu jeudi, et des mesures ont été prises pour limiter les impacts. Une firme spécialisée a été mandatée pour enquêter sur l'origine de l'attaq...
De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.