> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Information published.
La version 26.02 de 7-Zip corrige CVE-2026-14266, un débordement de tampon dans le décodage XZ. Faute de mise à jour automatique, l'installation reste manuelle.
Le post Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre a été publié sur IT-Connect.
Unknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available. Volexity published its findings after conducting an incident response investigation involving a compromised organization whose SonicWall SMA 1000 series VPN appliances we...
Elon Musk annonce que le code de X va passer en open source, mais sans spécifier de calendrier, et juste après le scandale Grok Build, prudence !
Le post X open source : Elon Musk promet d’ouvrir tout le code du réseau social a été publié sur IT-Connect.
A list of topics we covered in the week of July 13 to July 19 of 2026
Security operations centers (SOCs) have spent years struggling under the weight of growing alert volumes, expanding attack surfaces, and chronic staffing shortages. Now artificial intelligence is adding a new complication: not just more information, but more machine-generated...
Des escrocs se font passer pour votre banque ou le support Apple lors d'un appel FaceTime, puis captent en direct vos identifiants et vos codes bancaires.
Le post Cette arnaque FaceTime vide les comptes bancaires en direct a été publié sur IT-Connect.
1.
What is Claude Mythos?
Claude Mythos is an advanced AI model developed by Anthropic and is optimized for cybersecurity and healthcare applications.
Mythos 5 was originally released in April to a small group of vetted technology partners ahead of a planned wider roll...
Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package mean...
Microsoft a publié les KB5121767 et KB5121768, deux correctifs pour les PC Dell dont un pilote Intel IPF bloquait la mise à jour Windows de juillet 2026.
Le post Windows 11 – KB5121767 : Microsoft corrige en urgence le bug Intel qui bloquait des PC Dell a été publié sur IT-Connect.
In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like PowerShell instead of custom malware. He shares a case where attackers called a help desk,...
In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system.
The company said it detected and responded to the incident targeting its production infrastructure earlier last week.
"We ident...
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.
The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads.
The rogue gems are listed below -
git_credential_manager (versions...
Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick glance. Those tools learn from large collections of code, and some of that code can be tampered with before training starts. A poi...
ZoneAlarm Mobile Security is a security app from Check Point designed to protect mobile devices against phishing, malicious websites, unsafe networks, and fraudulent links. It is available for iPhone, iPad, Android, and can run on Apple silicon Macs through the App Store. Getting started The onboard...
Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State of Open Source AI 2026 identifies deployment, governance and operational tooling as persistent obstacles as model capability...
Hugging Face disclosed an intrusion that, according to them, was driven end to end by an autonomous AI agent system.
Along similar lines, Sysdig recently published a blog on JADEPUFFER, which it assesses to be an agent-driven ransomware capable of adapting in real time. The report does not identify...