> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 140.10.2esr-1~deb12u1.
Poland’s ABW confirmed hackers breached ICS at five water plants, gaining ability to alter equipment settings. Russia-linked APT groups suspected. Poland’s Internal Security Agency (ABW) has published a detailed account of a sustained campaign targeting the country’s water plants, documenting securi...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de la Direction Régionale de la Santé de Castille-et-León (GRS) pour des manquements en lien avec un système de communication non sécurisé pour la gestion des prescriptions médicales. Cette affaire déb...
A Virginia man was convicted on federal charges Thursday after a jury found him guilty of deleting 96 government databases and stealing an individual’s password, leading their email account to be accessed without permission.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de B.B.B., exploitante d'un bureau de transfert d'argent, comprenant le prononcé d'une amende de 2 000 € pour des manquements en lien avec la licéité du traitement de données personnelles. Cette affair...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de FRESHLY COSMETICS, S.L. (comprenant le prononcé d'une amende de 5 000 €) pour des manquements en lien avec l'utilisation de témoins de connexion. Cette affaire débute par une plainte d'un particulie...
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms.
The activity is being tracked by Elastic Security Labs under the moniker REF3076. The malware family is assessed to be a majo...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de l'Institut national de la sécurité sociale (INSS) pour des manquements en lien avec la gestion des données personnelles du Revenu minimum vital (IMV). Cette affaire débute par une enquête d'office d...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de MEGASTAR, S.L. comprenant le prononcé d'une amende de 2 000 € pour des manquements en lien avec son système de vidéosurveillance. Cette affaire débute par une plainte signalant l'absence de panneau...
Insider trading is rife on Polymarket:
Analysis by the Anti-Corruption Data Collective, a non-profit research and advocacy group, found that long-shot bets—Âdefined as wagers of $2,500 or more at odds of 35 percent or less—Âon the platform had an average win rate of around 52 percent in markets on m...
L'Autorité de protection des données (AP) néerlandaise a publié une décision de sanction à l'encontre de MLU B.V. (comprenant le prononcé d'une amende de 100 000 000 €) pour des manquements en lien avec des transferts de données personnelles vers la Russie. Cette affaire débute par une enquête initi...
All your compromised credentials are belong to us now instead of the other gang
EFF friend Guy Kawasaki has written a book: Everybody Has Something to Hide: Why and How to Use Signal to Preserve Your Privacy, Security, and Well-Being. This guide is now available in Spanish and English as an ebook in the EPUB format that you can download here. Take a look and consider sharing it...
A report by Poland’s top intelligence agency accused Russia of sabotage and hacking activities against the country’s military and civilian infrastructure.
The Senate’s top Democrat is worried about smaller government entities being left behind as AI models advance hacking risks.
The post Sen. Schumer seeks DHS plan on AI cyber coordination with state, local governments appeared first on CyberScoop.
Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fragment handling components including esp4, esp6, and rxrpc. The vulnerability enables reliable escalation from an unprivileged user to root and may be leveraged after initial compr...
Former cybersecurity executive Peter Williams stole several surveillance and hacking tools and sold them for $1.3 million to a Russian broker that works with Putin’s government.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
NVIDIA has confirmed in a statement for BleepingComputer that GeForce NOW user information has been exposed in a data breach. [...]