> TODAY'S SUMMARY (1 articles)
Today's cybersecurity landscape highlights a range of ongoing threats, including increased phishing attacks targeting remote workers as organizations adapt to hybrid work models. Ransomware groups continue to evolve their tactics, with a notable rise in double extortion methods, where data is both encrypted and threatened with public release. Additionally, vulnerabilities in popular software platforms have been exploited, emphasizing the need for timely patch management. Experts urge organizations to enhance their employee training on security awareness to mitigate risks. Overall, vigilance and proactive defense strategies remain critical in countering these escalating threats.
|
// AI-powered summary generated at 04:00
A new variant of the NGate malware that steals NFC payment data is targeting Android users by hiding in a trojanized version of HandyPay, a legitimate mobile payments processing tool. [...]
On April 7, six US government agencies issued a critical advisory warning domestic private sector organizations of potential infrastructural cyberattacks conducted by Iranian-affiliated Advanced Persistent Threat (APT) actors. The advisory stops short of attributing these thre...
NFC-based payment fraud is expanding geographically and operationally. A campaign active since November 2025 is targeting Android users in Brazil using a new variant of the NGate malware family, this time embedded in a trojanized version of HandyPay, a legitimate NFC relay application available on G...
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
Fuite ANTS : pourquoi les indices techniques fragilisent la thèse d’un vol massif de 18 millions d’enregistrements.
Fake emails already doing the rounds as ransomware crew boasts about what it allegedly stole UK enterprise software consultancy The Adaptavist Group is investigating a security breach after an intruder logged in with stolen credentials, while a ransomware crew claims it grabbed far more than the com...
North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO
Information published.
Bluesky suffered a 24-hour DDoS attack that caused outages. A pro-Iran hacker group claimed responsibility for the disruption. Bluesky experienced a sophisticated DDoS attack that disrupted its services for about 24 hours, starting on April 15. Bluesky is a decentralized, open-source microblogging s...
LunaSpy marque une étape inquiétante : des victimes reçoivent un smartphone déjà infecté, pensé pour espionner et frauder.
Admins are tired of taking photos, so this enables secure on-site unattended enrolment Japanese industrial giant Panasonic has created a new form of QR code it says will only work on designated devices and environments.…
There have been reports of threat actors using a .wav file as a vector for malware.
Credential stuffing is a cyberattack where attackers use stolen usernames and passwords, often obtained from data breaches or bought on the dark web, to gain unauthorized access to accounts on other platforms. These attacks are highly prevalent and a major contributor to data breaches, largely becau...
La fuite attribuée à TfL expose près de 10 millions de profils et relance le débat sur la transparence après une cyberattaque.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation.
The list of vulnerabilities is as fo...
And China is loving it Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations.…
1 700 policiers visés après des accès injustifiés à des systèmes liés à une enquête sensible.
Imposer aux télécoms de notifier toute cyberattaque en quatre heures à partir de février 2027.
Le nouveau Mozilla Firefox 150 apporte plusieurs nouveautés, notamment au sein du lecteur PDF, de la vue scindée, ou encore de la gestion des accès au réseau.
Le post Firefox 150 est disponible : découvrez les nouveautés principales a été publié sur IT-Connect.