> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Sept suspects liés à Dumpsec ont été arrêtés après le vol présumé de dizaines de millions de données.
Other noteworthy stories that might have slipped under the radar: ICS device exposure remains flat as attack surface widens, Microsoft issues incident response playbook for AI, IBM and AT&T accused of hack cover-ups.
The post In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million...
Oracle still hasn't patched the vulnerability the group has been using in its attacks since late May.
The post ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw appeared first on CyberScoop.
Lawmakers have failed to extend a surveillance law that allows US intelligence agencies to monitor targets abroad without a warrant.
Congress rejected a vote to extend Section 702 of the Foreign Intelligence Surveillance Act to July 2, which means, for a few days at least,...
The penalty is the largest ever issued by the commission for a personal data breach, surpassing the record 134.8 billion won ($88.8 million) fine levied against SK Telecom earlier this year.
An intruder has breached the French government’s encrypted messaging service, Tchap, showing once again that human error is a weak spot in any security system.
Tchap was developed in France as an example of national sovereignty and was designed to be a more secure option th...
Suite à l'installation de la mise à jour KB5094126 sur Windows 11, les liens OneDrive et SharePoint intégrés à l'Explorateur de fichiers ne fonctionnent plus.
Le post Windows 11 : la mise à jour KB5094126 casse l’accès OneDrive dans l’Explorateur ! a été publié sur IT-Connect.
Avant l’affaire Lyhanna, des alertes américaines éclairaient le rôle du NCMEC et des enquêteurs habilités à traquer les pédocriminels.
Apple and the Met Police are working together to make stolen iPhones harder to reset, resell, and profit from.
GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how underground forums expose early signals tied to software supply-chain risk. [...]
Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others
Clinical trial participant data stolen, but pharma giant says exposed records were pseudonymized
Des pirates ont introduit les systèmes informatiques de Novo Nordisk et copié des informations liées à des patients participant à des essais cliniques.
Le post Cyberattaque chez Novo Nordisk : des données d’essais cliniques dans la nature a été publié sur IT-Connect.
And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability
NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts
Cloudflare Security Insights system now processes over 120 scans per second, providing frequent insights for all customers. By optimizing Kafka consumers, Postgres queries, and our API, we scaled our throughput 10x without adding hardware.
Authorities seize crypto-laundering network and fake recruitment sites, JDY botnet targets U.S. military, and Miasma worm infects Microsoft and PyPi repos.
Google has filed a lawsuit against Outsider Enterprise, a China-based cybercrime network for using AI tools, including Gemini, to build phishing websites and scam infrastructure. The company said the operation has affected “hundreds of thousands of victims,” with losses estimated in the millions of...
Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access.
The post Industry Reactions to Claude Fable 5: Feedback Friday appeared first on SecurityWeek.