> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
La Commission nationale de l’informatique et des libertés (CNIL) et la Haute autorité de santé (HAS) ont défini les modalités du traitement de données personnelles mis en œuvre pour leur consultation publique sur le guide de bonnes pratiques relatif à l’intelligence artificielle dans le domaine des...
L'Autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'Ordre provincial des médecins chirurgiens et des dentistes de Macerata, comprenant le prononcé d'une amende de 4 000 €, pour des manquements en lien avec la communication illicite de données per...
Thor analyzes CVE data from 2025 and provides recommendations for where and how organizations should strengthen their defenses.
MOIS-linked MuddyWater crew has a new, custom implant An Iranian cyber crew believed to be part of the Iranian Ministry of Intelligence and Security (MOIS) has been embedded in multiple US companies' networks - including a bank, software firm, and airport, among others - since the beginning of Febru...
Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than 60,000 WordPress sites. [...]
Huntress researchers said actors used a malicious repository on GitHub to lure victims into downloading a bogus OpenClaw installer that delivered infostealer malware and the GhostSocks proxy. The fake installer was given greater legitimacy by being hosted on GitHub and its high ranking in Bing AI s...
​A U.S. government contractor's son, accused of stealing more than $46 million in cryptocurrency from the U.S. Marshals Service, was arrested Wednesday on the island of Saint Martin. [...]
Fraudsters are impersonating TechCrunch reporters and event leads, and reaching out to companies. Here's what we're doing about it, and what you can look out for.
Several security issues were fixed in Bleach.
A criminal network in Spain exploited dozens of Ukrainian women displaced by Russia’s war to carry out a multimillion-dollar fraud gambling scheme, Europol said Thursday.
Enterprise software was a major focus of zero-day activity during 2025, with security and networking devices, like firewalls, VPNs, and virtualization platforms among the most targeted by malicious hackers.
Ptitsyn and several others began using the Phobos ransomware in November 2020, attacking more than 1,000 organizations around the world. He was arrested in South Korea and extradited in November 2024.
Voiture connectée et IA : VillainNet viserait les supernets des voitures autonomes, dormant dans un sous-réseau puis agissant lors d’un basculement.
The 43-year-old Russian national ran a ransomware operation that impacted more than 1,000 victims globally. The conspiracy netted more than $39 million in extortion payments.
The post Phobos ransomware leader pleads guilty, faces up to 20 years in prison appeared first on CyberScoop.
Leak YGG : CardsShield, faux e-commerce, PayPal/Stripe, crypto et Tornado Cash, un pipeline taillé pour masquer les dons.
We’re excited to announce that Amazon Web Services (AWS) has completed the annual Dubai Electronic Security Centre (DESC) certification audit to operate as a Tier 1 Cloud Service Provider (CSP) for the AWS Middle East (UAE) Region. This alignment with DESC requirements demonstrates our continued com...
Leadership turmoil at the Cybersecurity and Infrastructure Security Agency was already raising alarms. Now the nominee to lead the agency is reportedly escorted out of a federal facility while the nation faces rising cyber threats tied to geopolitical tensions. At the moment stability matters most,...
Multiple news outlets are reporting on Israel’s hacking of Iranian traffic cameras and how they assisted with the killing of that country’s leadership.
The New York Times has an <a href="https://www.nytimes.com/2026/03/01/us/politics/cia-israel-ayatollah-compound.html"<article on the intellige...
Cisco has handed security teams one of the largest ever patching workloads affecting its firewall products, including fixes for two ‘perfect 10’ vulnerabilities in the company’s Secure Firewall Management Center (FMC) Software.
Overall, the March 4 release, the first of its...
Is ChatGPT safe to use? Learn the privacy, security, and business risks of AI assistants, what not to share, and a private alternative.