> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Seize organisations françaises citées par six groupes pirates entre le 1er et le 16 juillet 2026.
Bonjour à toutes et tous Cette semaine, les fuites de données dominent l’actualité avec NEBBIA, Croqvacances, seize millions de CV exposés et le piratage de l’opérateur Odido. LeakBase voit aussi réapparaître dix téraoctets de données volées.La menace prorusse reste active : NoName057(16) revendique...
Plus: Russian cyberspies turn to infrastructure hacking, DHS repeatedly fails to realize it’d been hacked, a breach exposes an AI music generator’s scraping ways, and more.
La base volée d’Action populaire ressurgit, exposant militants et organisation aux risques cyber et politiques.
LeakBase fermé, une archive de 10 To de données volées réapparaît via des stockages publics russes.
“Context bombing” tricks malicious AI agents into shutting down before they can do harm.
Un négociateur de rançongiciel condamné pour avoir aidé BlackCat à extorquer ses propres clients.
La police explore une piste et une voix après le vol des données de six millions de clients d’un important opérateur téléphonique.
Information published.
Information published.
wp2shell, c'est le nom d'une faille critique (RCE pré-authentifiée) dans le cœur de WordPress. Face à l'urgence, les mises à jour sont forcées.
Le post wp2shell : une faille critique expose des millions de sites WordPress a été publié sur IT-Connect.
Information published.
Information published.
Une cyberattaque a touché Alliance Distribution Services (ADS), une filiale de Hachette Australia, l'un des plus grands distributeurs de livres d'Australie. L'incident, survenu le 18 juillet, a gravement perturbé la distribution de titres, laissant les librairies indépendantes et les auteurs austral...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to unauthe...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone.
Read more in my article on the Hot for Security blog.