On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongl...

cert.europa.euil y a 3j

Import AI 476: Creativity and RSI; worse-than-China open weight models; AI goes to space

Import AI 476: Creativity and RSI <table border="0" cellpadding="0" cellspacing="0"...

Jack Clark from Import AIil y a 3j

Google

Google Finally Made Another Fitbit With a Screen

The Fitbit Edge offers more than the Air, but it's not a real smartwatch.

feeds.arstechnica.comil y a 3j

Hidden implant in Ledger hardware wallets linked to $93M theft

Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.

bleepingcomputer.comil y a 4j

Google

Ukraine’s drones knock out AI data center belonging to "Russia’s Google"

When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.

blog.cloudflare.comil y a 4j

Cybersécurité

French supermarket chains say cyberattack forced refrigerator shutdown

Danfoss controllers at hundreds of French supermarkets were compromised, with attackers forcing defrost and causing food losses at some stores.

feeds.feedburner.comil y a 4j

Cybersécurité

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A critical vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, has been exploited in the wild.

securityweek.comil y a 4j

Cybersécurité

Hundreds of thousands impacted by data breach at biosensor firm iRhythm

Hackers stole the personal information of more than 360,000 cardiac patients from iRhythm in a June 2026 data breach.

securityweek.comil y a 4j

Claude IA

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure.

securityaffairs.comil y a 4j

Microsoft

Microsoft: Outdated Windows devices will stop receiving security updates

Microsoft urges users to prepare for Windows Update certificate rotation during 2027 to keep receiving updates and security fixes.

helpnetsecurity.comil y a 4j

Let's Encrypt moving to 64-day certificate lifetimes in 2027

Starting February 2027, Let’s Encrypt will move to 64-day certificate lifetimes by default, ahead of 45-day lifetimes in 2028.

securityweek.comil y a 4j

Can you really make more than $200M in six months without encrypting victims? It seems Silent Ran...

Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption.

securityaffairs.comil y a 5j

Claude IA

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels.

bleepingcomputer.comil y a 6j

Intelligence Artificielle

OpenAI doubles down on decision to fire three AI safety researchers

OpenAI fired three safety researchers for a “breach of trust,” after the trio accused the company of putting its corporate interests before safety.

securityweek.comil y a 6j

Gemini

AI disqualification yields new Nikon Small World in Motion winner

New winner is Nguyen Nam Nhat of Vietnam for video of a roundworm and single-celled Dileptus.

feeds.arstechnica.comil y a 6j

Cyber Arnaque

FBI touts another ShinyHunters arrest in response to data breach

The FBI is doing another victory dance after arresting someone they allege assisted ShinyHunters with the FBI Jobs attack. Brian Krebs reports: Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investig...

databreaches.netil y a 6j

Man admits to running network of 15,000 money mules for cybercriminals

Oleg Korniev, a leader of the YMCO money laundering system used by cybercriminals, has pleaded guilty in a US court.

securityweek.comil y a 6j

Intelligence Artificielle

Disrupting AI-enabled “false front” operations

A Latin American propaganda operation run by Russians and a cluster of Iranian fake journalist identities each had help from now-closed ChatGPT accounts, OpenAI's safety team said.

therecord.mediail y a 6j

Cybersécurité

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.

bleepingcomputer.comil y a 6j

← PrécédentPage 4 / 118Suivant →