> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
A commit to the AsyncAPI generator GitHub repository injected obfuscated JavaScript into four npm packages with a combined weekly download volume of over 3 million. Here's what we know and how to check if you're affected.
Test du Geekom A9 Max 2026 Edition : Ryzen AI 9 HX 470, NPU 55 TOPS, Radeon 890M. Ce qui change face à la génération 2025 et ce qu'il vaut pour l'IA locale.
Le post Test Geekom A9 Max 2026 Edition : un mini PC haut de gamme a été publié sur IT-Connect.
The retailer said the incident did not affect its online shopping platform itself but involved a separately stored customer database maintained by a third-party provider. According to notifications sent to Lidl's German, Belgian and Dutch customers on Friday, the attackers briefly accessed the file...
Gamer et budget: faut-il assembler soi-même ou opter pour un PC prêt-à-lancer? Analyse des coûts, concessions et fiabilité.
Le post Monter son PC soi-même, bonne ou mauvaise idée ? a été publié sur IT-Connect.
Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications.
The post Defending SaaS-based applications...
Election officials are facing an impossible choice: follow federal directives they don’t trust, or risk becoming targets of a criminal investigation.
The post States are building their own election defense networks as federal support evaporates appeared first on CyberScoop.
“While ultimately it is up to parents to decide when children get their first smartphones, what we already have is a consensus that there needs to be a start date for the age children can join social media,” says European Commission President Ursula van der Leyen.
Several security issues were fixed in LibreOffice.
Several security issues were fixed in PipeWire.
Japan's largest taxi operator, Nihon Kotsu, announced that its systems were compromised in a cyberattack, forcing the company to shut down part of its infrastructure. [...]
Apple would not comment on the "security breach," which allegedly allowed a former employee to download sensitive files from Apple's network long after he departed the company for OpenAI.
L'Autorité de protection des données néerlandaise (AP) a publié des orientations destinées à encadrer le développement et l'utilisation de l'intelligence artificielle (IA) générative en conformité avec le RGPD.L'autorité a publié des lignes directrices destinées aux développeurs et aux responsables...
The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times. [...]
L'autorité de contrôle italienne sanctionne un professionnel pour l'installation d'un système de vidéosurveillance filmant la voie publique et enregistrant le son, en violation des principes de licéité, de minimisation et de transparence.Faits et contexteL'autorité italienne de protection des donnée...
L'autorité sud-coréenne de protection des données (PIPC) a apporté des clarifications concernant la nouvelle réglementation sur la collecte automatisée de données par le secteur financier.À compter du 20 août, une nouvelle disposition de l'acte d'exécution de la loi sur la protection des données per...
Lidl disclosed a third-party data breach affecting online shop customers in Germany, Belgium, and the Netherlands. Payment data was not exposed. Lidl contacted customers of its online shop in Germany, Belgium, and the Netherlands last week to inform them that their personal data had been stolen in a...
L'autorité polonaise a rappelé à l'ordre un responsable du traitement et son sous-traitant pour ne pas avoir respectivement vérifié et mis en œuvre des garanties suffisantes en matière de sécurité, suite à un accès non autorisé à une boîte de messagerie électronique.Faits et contexteL'autorité polon...
A new macOS information-stealing malware called CrashStealer pretends to be Apple's crash-reporting tool to steal credentials, keychain data, and crypto wallets. [...]
The U.S. Treasury Department announced sanctions against First VPN Service (1VPNS) and its Ukrainian administrator for aiding ransomware groups. Separately, a Belarusian man was sanctioned for malware "cryptors."
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco IOS flaw, tracked as CVE-2008-4128, to its Known Exploited Vulnerabilities (KEV) catalog....