> TODAY'S SUMMARY (126 articles)
Today's cyber news highlights several significant threats and trends in the cybersecurity landscape:
1. Zohar Pinhasi, CEO of MonsterCloud, has been indicted for allegedly defrauding ransomware victims by secretly paying attackers while significantly overcharging clients for recovery services.
2. A malware campaign named 'Midnight Mimosa' has been uncovered, involving low-cost Android phones pre-installed with residential proxy malware, enabling covert installations of malicious apps.
3. The FBI reported that China-linked hackers compromised email systems of various Southeast Asian government and healthcare organizations, creating a portal for third-party access to stolen data.
4. A critical vulnerability in multiple Atlassian products is currently being exploited, allowing unauthorized access to sensitive files.
5. Cybercriminals have hijacked country-code domains to obtain certificates for impersonating trusted services, while a new phishing campaign targets YouTube creators through fake sponsorship offers.
These incidents reflect ongoing challenges in ransomware, malware distribution, and sophisticated phishing tactics, underscoring the need for heightened cybersecurity measures.
|
// AI-powered summary generated at 20:01
L'autorité italienne de protection des données (Garante) a sanctionné la commune d'Arvier pour l'utilisation d'un système de vidéosurveillance non conforme. Les manquements principaux concernent l'absence de base juridique claire et spécifique pour les finalités administratives invoquées, la violati...
L'autorité finlandaise de protection des données a sanctionné un fournisseur de services de santé pour avoir transmis des données de santé à des géants de la technologie via des outils de suivi sur son service de prise de rendez-vous en ligne, sans évaluation ni mesures de protection adéquates.Faits...
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a clôturé l'injonction prononcée en janvier 2026 contre FRANCE TRAVAIL, constatant la mise en conformité de l'organisme avec ses obligations en matière de sécurité des données.Faits et contexteL'autorité de contrôle française (CNIL) a...
Le nouveau Préposé fédéral à la protection des données et à la liberté d'information (BfDI) allemand, M. Hennemann, a présenté les axes principaux de son mandat lors de la Conférence de presse fédérale.Son action se concentrera sur trois priorités : une modernisation de l'État conforme à la protecti...
The owner of a ransomware recovery firm was hit with wire fraud charges for allegedly making secret ransom payments while overcharging the victims of attacks.
The company said its investigation, carried out with external experts, found the attackers had accessed “some personal information, including names and contact details, and certain non-personal account related information.”
Credential-stealing malware detected within minutes of npm release, but impact remains unknown
We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8&#;x26;#;xc2;&#;x26;#;xa0;of the most popular AI coding assistants and&#;x26;#;xc2;&#;x26;#;xa0;agents including Claude Cod...
Today is DAF Day! This event highlights the millions of donor-advised funds (DAFs) people have set up to make charitable donations and change the world. If you have a DAF, consider supporting EFF today.
Decisions about your privacy, encryption, artificial intelligence, online speech, and digital sec...
Découvrez les conteneurs WSL et l'outil wslc pour exécuter des conteneurs Linux sur Windows sans Docker Desktop : installation, commandes, build et gestion.
Le post Conteneurs WSL : bien débuter avec wslc pour exécuter des conteneurs Linux sur Windows a été publié sur IT-Connect.
Join F3 on 29 October at the FCA in London for a FREE, hands-on cryptocurrency investigation workshop exploring digital forensics, blockchain intelligence, OSINT and real-world investigative techniques.
Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said.
The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and...
A 25-year-old man who helped steal nearly $260,000 in cryptocurrency through a SIM-swapping fraud scheme was sentenced to two and a half years in prison at a London court.
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.
The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. [...]
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN.
According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company...
The hackers alerted the fashion giant's customers through a push notification that said they had "fully compromised" the company's cloud storage.
SPONSORED FEATURE: Old attack, new protections