> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
Cloudflareâs global network has officially crossed 500 Tbps of external capacity, enough to route more than 20% of the web and absorb the largest DDoS attacks ever recorded.
A U.K. communications regulator, Ofcom, has said it will be cracking down on the spread of the images in the aftermath of the Grok scandal, which led to millions of ânudifiedâ images of women and children to be circulated worldwide.
Drift officials said the operation began six months ago, when they were approached at a cryptocurrency conference by members of a company claiming to focus on quantitative trading.
Google has expanded its encryption capabilities in Gmail to mobile devices, enabling enterprise customers to transmit encrypted emails directly within the app on both Android and iOS. The update removes a limitation that previously restricted native encrypted email use on mobile devices. The rollou...
Practical recommendations for Wi-Fi network isolation and defending against all AirSnitch-style attacks.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âElectric Vehiclesâ appeared first on Security Boulevard.
TL;DR Bloomberg reported on April 1, 2026 that Iranâs Islamic Revolutionary Guard Corps (IRGC) was already extracting transit tolls fromâŠ
The post Iranâs Strait of Hormuz Crypto Toll: An Evolution of Tehranâs Expanding Use of Digital Assets appeared first on Chainalysis.
Flashpoint analysts, working with partner financial institutions, have observed a growing number of PhaaS operations operating with a level of coordination and specialization more commonly associated with legitimate software platforms. These ecosystems bring together phishing kit developers, infrast...
At Wordfence, we run a bug bounty program that pays out mid-six figures per year to researchers in bug bounties for WordPress related vulnerabilities. Funding this research helps us improve security for the WordPress community overall, and helps us secure our customers by rolling out protection for...
La Cour administrative suprĂȘme a confirmĂ© une dĂ©cision de l'autoritĂ© polonaise de protection des donnĂ©es (UODO) ordonnant la suppression de donnĂ©es Ă l'encontre de BEST SociĂ©tĂ© de fonds d'investissement S.A. et BEST III Fonds d'investissement non public, pour des manquements en lien avec la collecte...
We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.
L'Agence Espagnole de Protection des DonnĂ©es (AEPD) a publiĂ© une dĂ©cision de sanction Ă l'encontre de VODAFONE ESPAĂA, S.A.U. (comprenant le prononcĂ© d'une amende de 250 000 âŹ) pour des manquements en lien avec la rĂ©attribution erronĂ©e d'un numĂ©ro de tĂ©lĂ©phone ayant entraĂźnĂ© une violation de la conf...
L'Autorité britannique de protection des données (ICO) rappelle les obligations des partis politiques en matiÚre d'utilisation des données personnelles dans le contexte des élections parlementaires et locales prévues en mai 2026.Le Commissaire à l'information a écrit aux partis politiques pour leur...
The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation. [...]
The fraud landscape has been changed by AI and cryptocurrency in a way that should concern organisations and individuals alike.
Read more in my article on the Fortra blog.
Leading Through the Cyber Abyss
In Episode 019 of The Defenderâs Log, host David Redekop sits down with Nim Nadarajah, CISO and Managing Partner of Critical Matrix, to explore the evolving landscape of cybersecurity leadership. From the âannual pilgrimageâ of RSAC 2026 to the front lines of incident...
In this episode of The Talos Threat Perspective, we discuss how vulnerability exploitation is accelerating, and why attacker speed, AI, and exposed systems are affecting the patch window.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.55-1~deb12u1.
Posted by Jiacheng Lu, Software Engineer, Google Pixel Team
Google is continuously advancing the security of Pixel devices. We have been focusing on hardening the cellular baseband modem against exploitation. Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with m...
ClickFix campaigns have found a way around macOS Tahoe's warnings against pasting commands in the Terminal. They're using Script Editor instead.