> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
L'autorité hellénique de protection des données a émis un avis sur un projet de loi du ministère de la gouvernance numérique et de l'intelligence artificielle (ΥΨΔΤΝ) visant à créer un portail numérique unique de paiement (ΕΨΠΠ).Ce portail est conçu comme une infrastructure numérique centrale pour g...
Le Comité européen de la protection des données (CEPD) a publié une mise à jour de son recueil de cas thématique du guichet unique portant sur le droit d'opposition et le droit à l'effacement.Ce recueil, élaboré dans le cadre du programme du groupe d'experts de soutien pour favoriser la coopération...
Addressable could be made to consume resources and cause a denial of service if it received specially crafted input.
La Commission Nationale de l'Informatique et des Libertés (CNIL) rappelle les règles applicables à la collecte et à l'exploitation des données de géolocalisation par les applications mobiles, ainsi que les bonnes pratiques pour les utilisateurs.La CNIL souligne que les applications mobiles utilisent...
Un manquement à la sécurité des données est caractérisé lorsqu'un employé accède sans autorisation aux informations bancaires d'un client, même si cet accès est réalisé en dehors de ses attributions et à la demande d'un tiers, engageant ainsi la responsabilité de son employeur.Faits et contexteL'Aut...
A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project.
From there, they could read live conversations, steal the data users shared, and make the bots send atta...
This blog post is part 1 of a 2-part series. The second part will set out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealab...
In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been...
A student advocacy organization and tech trade group had appealed to the high court to stay the Texas App Store Accountability Act on an emergency basis until the lower court rules.
Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses
A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials
The capability, called Cyber Shield, is designed to counter a threat the National Cyber Security Centre (NCSC) said could see attackers “move at machine speed and greater scale, reducing opportunities for detection and response.”
The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups. [...]
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC.
"The campaign did not depend on a fake Microsoft password page. It used a malic...
The company said the breach affected an email system used to manage customer email accounts, webmail services and email storage for five Japanese internet service providers.
Cut through hours of CCTV, body-worn and dashcam footage in minutes with S21 CCTV v2.0 — AI-powered, offline and secure video review built to help investigators find what matters faster.
Januscape (CVE-2026-53359), une faille use-after-free restée 16 ans dans KVM, permet à une VM Intel ou AMD de planter son hôte, voire de s'en évader.
Le post Januscape : 16 ans dans l’ombre pour cette faille KVM qui menace le cloud a été publié sur IT-Connect.
What is spyware? Everyone's a target, not just journalists and dissidents. Learn the four types, who they target, and how to protect yourself.
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown.
The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access to the organization...
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows. [...]