> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Une autorité sanitaire est sanctionnée pour l'absence de désignation formelle du personnel, d'instructions documentées et de formation spécifique au sein d'un service hospitalier, illustrant que des politiques générales au niveau de l'entité ne suffisent pas à démontrer la conformité opérationnelle....
L'autorité hellénique de protection des données a émis un avis sur un projet de loi du ministère de la gouvernance numérique et de l'intelligence artificielle (ΥΨΔΤΝ) visant à créer un portail numérique unique de paiement (ΕΨΠΠ).Ce portail est conçu comme une infrastructure numérique centrale pour g...
Addressable could be made to consume resources and cause a denial of service if it received specially crafted input.
Le Comité européen de la protection des données (CEPD) a publié une mise à jour de son recueil de cas thématique du guichet unique portant sur le droit d'opposition et le droit à l'effacement.Ce recueil, élaboré dans le cadre du programme du groupe d'experts de soutien pour favoriser la coopération...
La Commission Nationale de l'Informatique et des Libertés (CNIL) rappelle les règles applicables à la collecte et à l'exploitation des données de géolocalisation par les applications mobiles, ainsi que les bonnes pratiques pour les utilisateurs.La CNIL souligne que les applications mobiles utilisent...
A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project.
From there, they could read live conversations, steal the data users shared, and make the bots send atta...
Un manquement à la sécurité des données est caractérisé lorsqu'un employé accède sans autorisation aux informations bancaires d'un client, même si cet accès est réalisé en dehors de ses attributions et à la demande d'un tiers, engageant ainsi la responsabilité de son employeur.Faits et contexteL'Aut...
This blog post is part 1 of a 2-part series. The second part will set out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealab...
In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been...
A student advocacy organization and tech trade group had appealed to the high court to stay the Texas App Store Accountability Act on an emergency basis until the lower court rules.
Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses
A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials
The capability, called Cyber Shield, is designed to counter a threat the National Cyber Security Centre (NCSC) said could see attackers “move at machine speed and greater scale, reducing opportunities for detection and response.”
The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups. [...]
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC.
"The campaign did not depend on a fake Microsoft password page. It used a malic...
The company said the breach affected an email system used to manage customer email accounts, webmail services and email storage for five Japanese internet service providers.
Cut through hours of CCTV, body-worn and dashcam footage in minutes with S21 CCTV v2.0 — AI-powered, offline and secure video review built to help investigators find what matters faster.
Januscape (CVE-2026-53359), une faille use-after-free restée 16 ans dans KVM, permet à une VM Intel ou AMD de planter son hôte, voire de s'en évader.
Le post Januscape : 16 ans dans l’ombre pour cette faille KVM qui menace le cloud a été publié sur IT-Connect.
What is spyware? Everyone's a target, not just journalists and dissidents. Learn the four types, who they target, and how to protect yourself.
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown.
The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access to the organization...