From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments.
The...
Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response Report.
The post AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report appeared first on Unit 42.
USN-8477-1 introduced a regression in tar
Data purges deemed an example of 'misaligned behavior' that upstart is working to avoid
A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password. [...]
Coca Cola said dairy production at its Fairlife unit will "remain suspended" in the United States following a hack.
The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the United States. [...]
The Anubis ransomware-as-a-service (RaaS) operation has hit some healthcare organisations hard - but they are not the only ones at risk.
Read more in my article on the Fortra blog.
Democratic Sen. Ron Wyden says the Trump administration should pressure Canada not to enact a proposal that would "weaponize American technology infrastructure" for surveillance purposes.
La Cour administrative suprême autrichienne a confirmé la sanction de l'autorité de protection des données pour le traitement illicite de données relatives aux "affinités politiques" de 2,2 millions de personnes, qualifiées de catégories particulières de données, et a fixé l'amende finale à 13 milli...
L'autorité norvégienne de protection des données (Datatilsynet) a commenté un projet de loi visant à encadrer la lutte contre le dopage et la manipulation des compétitions sportives.L'autorité accueille favorablement la codification légale des activités antidopage, destinée à remplacer les autorisat...
Models demand trust without offering verification
L'autorité espagnole sanctionne une entreprise américaine pour des mesures de sécurité insuffisantes face à une attaque par bourrage d'identifiants et pour une notification tardive de la violation de données qui en a résulté.Faits et contexteL'autorité espagnole de protection des données (AEPD) a au...
L'autorité grecque de protection des données a sanctionné un fournisseur d'énergie et ses quatre centres d'appels sous-traitants pour avoir mené des campagnes de prospection téléphonique sous le prétexte d'appels d'information ou d'enquêtes de satisfaction, révélant des défaillances systémiques dans...
USN-8477-1 fixed a vulnerability in tar. The update introduced a regression
that could cause tar to fail to extract certain valid files.
This update fixes the problem.
Original advisory details:
It was discovered that tar incorrectly handled certain crafted archive files.
An attacker could possi...
See also: day one, day two. There is only one thing that is better than two days of HTTP workshop, and that is of course three days of HTTP workshop. The final day of this edition of the series started out with us again shuffling around where we parked ourselves around the big table. Except … Contin...
Several security issues were fixed in Authlib.
A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude's access to connected services such as Gmail, Google Docs, Google Calendar, and Salesforce. [...]
The number of people who got approval to be in the Federal Rotational Cyber Workforce program was in the single digits, GAO found.
The post Program to rotate cyber personnel through federal agencies saw little use appeared first on CyberScoop.
A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet seed phrases, credentials, and other sensitive data. [...]