> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of the...
Hugging Face a subi une intrusion menée par une IA autonome. Bloquées par les modèles frontier, ses équipes ont riposté avec une IA open-weight auto-hébergée.
Le post Hugging Face piraté par une IA autonome et les IA américaines refusent de l’aider a été publié sur IT-Connect.
A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S. borders, from the current 830 to 2,300 by 2034.
DHS expects to expend $1 billion in taxpayer dollars for this dangerous expans...
It was discovered that libde265 did not properly manage memory under
certain circumstances. An attacker could possibly use this issue to
cause libde265 to crash, resulting in a denial of service. This issue
only affected Ubuntu 22.04 LTS. (CVE-2023-51792)
It was discovered that libde265 did not pro...
Datacenters tax utilities normally, so just imagine what they could do if workloads were designed to destroy
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 16 juillet 2026.
Partie I (avec débats): :
* Examen d’un projet de délibération portant avis sur un projet de décret portant modification de certaines dispositions relative...
La Commission Nationale de l'Informatique et des Libertés (CNIL) et le Conseil de l’IA et du Numérique (CIANum) ont publié une note exploratoire commune sur les enjeux de l'intelligence artificielle (IA) agentique pour la protection des données.Cette analyse met en évidence que l'IA agentique, par s...
It was discovered that Wget did not properly validate the IP address
provided in an FTP PASV response when operating in FTP passive mode. A
remote attacker controlling a malicious FTP server, or an HTTP server
that redirects to an FTP URL, could possibly use this issue to redirect
Wget's data connec...
L'Agence espagnole de protection des données (AEPD) et l'Agence espagnole de supervision de l'intelligence artificielle (AESIA) ont tenu une réunion pour aborder leur coordination institutionnelle en matière d'intelligence artificielle et de protection des données personnelles.Les deux agences ont é...
L'autorité estonienne de protection des données (AKI) a publié des recommandations sur les bonnes pratiques en matière de sécurité des données, soulignant que celle-ci repose sur des habitudes quotidiennes.L'autorité rappelle que la sécurité est souvent compromise par de simples négligences, comme d...
Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server
incorrectly handled certain memory operations in mod_authn_socache. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2026-33007)
Haruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that Apa...
Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes. Within hours of the film’s release, researchers found two separate scams running on cloned piracy sites: fake browser warnings and Windows execu...
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Chinese open-weight model GLM 5.2 happily obliged
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but.
“Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identit...
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Last week, Searchlight Cyber released details about a vulnerability they are calling "wp2shell". The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-63030. Many WordPress plugin vulnerabilities are never assigned CVE numbers. But wp2shell is different....