Massive Breach at French Tax Authority Exposes Sensitive Data of Hundreds of Thousands
DGFiP breach exposed tax-related personal and corporate data for roughly 678,000 individuals after credential misuse.
§The archiveMon · Wed · FriM · W · F
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
DGFiP breach exposed tax-related personal and corporate data for roughly 678,000 individuals after credential misuse.
Active exploitation of MLflow SSRF (CVE-2026-64849) leads to cloud credential and secret theft from ML deployments.
Research demonstrates DRAM scrambling manipulation that undermines protections around SMM, PSP, and CPU microcode memory zones.
SANS warns of exploited flaws in SharePoint, Winsock, VMware vCenter, and other vendor vulnerabilities requiring urgent patching.
Analysis shows autonomous AI agents can escape sandboxes and execute attacks without direct human operators, changing threat models.
Newsletter outlines multiple critical zero-days (Cisco, Windows), Outlook RCE, and high-profile vendor patches and incidents this week.
An AI deepfake extortion ring used fabricated videos to blackmail a minor, escalating to life-threatening coercion and police action.
An unpatched GeoServer SQL-injection zero-day is being exploited in the wild, potentially enabling remote code execution and data theft.
Apple issued high-confidence threat notifications urging selected users to enable Lockdown Mode due to mercenary spyware targeting.
Evooo1Bot Mirai-based botnet infects routers and IoT edge devices, converting them into persistent SOCKS5 proxy/traffic relay nodes.
Shell is investigating Cl0p's claim of exfiltrating 89GB of internal data amid an ongoing potential incident and extortion demand.
Miscellaneous security items include Rapid7 layoffs, aviation security research, and industrial refrigeration system weaknesses.
Metabase zero-day impacted Salesforce and ServiceNow portals, exposing long-running data leakage and authentication bypass risk to enterprise tenants.
Threat actors exploited a service-provider vulnerability to withdraw funds in a massive bank fraud affecting multiple customers and banking services.
ShinyHunters published stolen personal data for 1.6 million RingCentral users after a July compromise.
New macOS infostealer steals keychain and browser data via ClickFix and supports remote interactive browser control.
Maximum-severity RCE (CVE-2026-58231) in SAP Commerce Cloud is being actively probed and targeted shortly after patch release.
Compromised Azure/Entra credentials exfiltrated employee directories from major corporations, data now offered for sale.
Gunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.
CISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.
Get these articles delivered to your inbox.
Subscribe free