> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
A former EU lawmaker was hacked with Pegasus spyware while investigating its use, according to Citizen Lab. The Citizen Lab published a report documenting one of the more darkly ironic findings in recent surveillance research: former Member of the European Parliament Stelios Kouloglou was repeatedly...
USN-8496-1 introduced a regression in cifs-utils
A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out.
Bad Epoll sits in the same small stretch of kernel code where Anthropic's mos...
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls.
Avalon combines credential collection, lateral movement, remote access, reco...
USN-8496-1 fixed a vulnerability in cifs-utils. Unfortunately, the fix
introduced a regression with Kerberos mounts. This update reverts the
security update until a complete fix is available.
We apologize for the inconvenience.
Original advisory details:
It was discovered that cifs-utils incorre...
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. [...]
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 4 juin 2026.
Partie I (avec débats): :
* Présentation des résultats de l’enquête « DPO et IA » par des représentants du ministère du Travail (DGEFP) et de l’AFPA ;
* Comm...
L'autorité suédoise a prononcé une réprimande à l'encontre de la police pour un manquement à son obligation d'information des voyageurs dans une zone de contrôle aux frontières, l'information n'étant disponible que sur son site internet sans aucun renvoi sur place.Faits et contexteL'autorité suédois...
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.
According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legit...
L'autorité polonaise de protection des données (UODO) a présenté un projet pilote de certification pour les spécialistes de la protection des données, développé par le Réseau Scientifique et Académique Informatique - Institut National de Recherche (NASK).Ce programme, présenté le 2 juillet 2026, s'a...
L'autorité suédoise de protection de la vie privée (IMY) commente une décision de la Cour suprême des États-Unis susceptible d'affecter la validité de la décision d'adéquation pour les transferts de données vers ce pays.La Cour suprême des États-Unis a jugé, dans l'affaire "Trump v. Slaughter", qu'u...
In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical addresses, phone numbers, dates of birth and other information relating to donors, su...
L'autorité hellénique de protection des données a sanctionné un fournisseur d'énergie et une banque pour des manquements liés à la gestion d'ordres de prélèvement et au non-respect du droit d'accès, soulignant la responsabilité de chaque acteur dans la chaîne de traitement.Faits et contexteL'autorit...
Le ministère du Travail et des Solidarités, l’Association française des correspondants à la protection des données (AFCDP) et la Commission nationale de l'informatique et des libertés (CNIL) ont publié les résultats d’une étude de 2025 portant sur l’évolution du métier de délégué à la protection des...
Microsoft users have been hit by a massive, automated password spray attack.
Among those targeted by the attack were clients of security company Huntress. It reported that the attackers made 81 million attempts to log into its customers’ accounts between June 12 and 26 — an...
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting.
The post In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM...
Third-party contractor compromise exposed health information and insurance billing passwords
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...]
Adobe will now issue security patches for its products twice as often to deal with the increasing pace of software vulnerability discovery and exploitation.
This follows Oracle’s decision to increase its quarterly patch program to a monthly one.
Adobe issues patches on t...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.