> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Une cyberattaque a touché Alliance Distribution Services (ADS), une filiale de Hachette Australia, l'un des plus grands distributeurs de livres d'Australie. L'incident, survenu le 18 juillet, a gravement perturbé la distribution de titres, laissant les librairies indépendantes et les auteurs austral...
On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to unauthe...
Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone.
Read more in my article on the Hot for Security blog.
Ernst & Young (EY) disclosed a data breach after attackers compromised a third-party IT support system containing client documents and tax information. Ernst & Young (EY) is disclosed a data breach linked to a compromised third-party support ticket system used by its IT teams. The platform s...
If every meeting, watercooler conversation, and date gets transcribed and summarized, who's actually reading any of it?
An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable.
Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system.
Adam...
Lots of articles about this.
As usual, you can also use this squid post to talk about the security stories in the news that I havenât covered.
Blog moderation policy.
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and stole company data....
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process restarts.
OpenSSL shipped the HollowByte fix in June with no CVE, no advisory, and no changelog entry pointin...
Cloudflare has deployed two WAF rules in response to high-severity vulnerabilities disclosed to us by the WordPress security team. The new rules protect all Cloudflare customers using affected WordPress versions, but customers should still update immediately to a patched release.
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack.
The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an...
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. [...]
A cyberattack hit one of Japanâs largest food companies, Nichirei, disrupting logistics and shipments. The company is gradually restoring operations. Nichirei is one of Japanâs largest food companies, best known for its frozen food business. Founded in 1942 and headquartered in Tokyo, it operates gl...
CISOs at government organizations and universities have an unexpected ally coming to their aid: OnlyFans models.
For some time, hackers have exploited weaknesses in the websites of universities or government departments to host scams or malware, using content stolen from th...
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.
A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and...
Reversing course, Flock Safetyâthe surveillance technology vendor most known for its extensive network of automated license plate readersâhas announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of âhuman distress.â
In October 2025, EFF warned the public th...
L'AutoritĂ© de protection des donnĂ©es belge a validĂ© une procĂ©dure Ă l'amiable avec une entreprise du secteur du divertissement, incluant le paiement de 5 000 âŹ, suite Ă une plainte concernant l'envoi de prospection commerciale non sollicitĂ©e. La dĂ©cision aborde les manquements liĂ©s Ă la transparence...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Le Comité européen de la protection des données (CEPD) a appelé à la création d'une base juridique claire pour le partage d'informations entre régulateurs et a discuté des moyens de renforcer l'application du RGPD.Lors d'une réunion à Dublin les 16 et 17 juillet 2026, le CEPD a souligné le besoin d'...