> TODAY'S SUMMARY (14 articles)
Today's cyber news highlights several significant threats and trends. A coordinated operation has targeted phishing kits, leading to domain seizures and legal action. Cybercriminals are increasingly attacking physical systems, emphasizing the need for enhanced security in building management. The MALFEX campaign has introduced a malicious npm package, "imgdecode," that contains a shellcode loader, further demonstrating the risks in software supply chains. Additionally, suspicious notifications have been reported on platforms like Leboncoin and Vinted, with links to malicious casinos. The U.S. CISA has added multiple vulnerabilities, including those related to Fortinet and BeyondTrust, to its known exploited catalog. Finally, AI agents are reportedly accessing sensitive data in Indian organizations, raising concerns about the use of offensive AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Legislators at both the state and federal level have increasingly scrutinized how AI models suck up data for training purposes.
The Treasury Department’s Financial Crimes Enforcement Network (FinCEN) released a study last week covering 4,194 ransomware incidents that were reported through the Bank Secrecy Act over the three-year period.
A new report by the Financial Crimes Enforcement Network (FinCEN) shows that ransomware activity peaked in 2023 before falling in 2024, following a series of law enforcement actions targeting the ALPHV/BlackCat and LockBit ransomware gangs. [...]
Amélioration des renseignements sur les menaces (Threat-Intelligence) pour tous les utilisateurs de Security Copilot.
Instagram and Facebook users in the EU will now have the option to share less personal data and see fewer personalized ads.
A security flaw in the widely-used Apache Tika XML document extraction utility, originally made public last summer, is wider in scope and more serious than first thought, the project’s maintainers have warned.
Their new alert relates to two entwined flaws, the first CVE-202...
Job application emails are more important than ever. Make a lasting impression with these professional tips and templates.
The cybersecurity landscape is undergoing another seismic shift — one driven not just by AI-enabled attackers but by a structural imbalance in how defenders and adversaries innovate. John Watters traces the evolution of modern cyber intelligence from its earliest days to the new era of AI-accelerat...
Minors groomed to kill and intimidate victims Nearly 200 people, including minors accused of involvement in murder plots, have been arrested over the last six months as part of Europol's Operational Taskforce (OTF) GRIMM. The operation targets what cops call "violence-as-a-service" - crime crews rec...
At re:Invent 2025, AWS unveiled its latest AI- and automation-enabled innovations to strengthen cloud security for customers to grow their business. Organizations are likely to increase security spending from $213 billion in 2025 to $377 billion by 2028 as they adopt generative AI. This 77% increase...
L’autorité belge de protection des données a aujourd’hui publié une décision à l’encontre de CAW Oost-Vlaanderen, comprenant le prononcé d’une réprimande pour des manquements liés à l’utilisation non autorisée du numéro de registre national dans la gestion des dossiers clients.Cette affaire débute p...
It was discovered that Radare2 contained several memory leaks. An attacker
could possibly use these issues to cause a denial of service.
L’autorité polonaise de protection des données (UODO) a publié une décision ordonnant l’arrêt, sous sept jours, du traitement de données personnelles par un système de vidéosurveillance couvrant une voie publique et des propriétés voisines, en raison de l’absence de base légale. Cette affaire débute...
The police in Poland arrested three Ukrainian nationals for allegedly attempting to damage IT systems in the country using hacking equipment and for obtaining "computer data of particular importance to national defense." [...]
L’autorité belge de protection des données a aujourd’hui publié une décision concernant la société Freedelity, comprenant la fixation de nouveaux délais de mise en conformité et la mise en place d’astreintes pour des manquements relatifs à la collecte et au traitement des données personnelles, notam...
L’autorité nationale de contrôle de la protection des données personnelles a publié une décision de sanction à l’encontre de la Compagnie des Eaux Oltenia S.A., comprenant le prononcé d’une amende de 1 000 € pour des manquements relatifs à la sécurité des données personnelles.Cette affaire débute pa...
Payments declined one-third to $734M, yet the number of victims confronting ransomware still remains a largely unchanged epidemic, sliding just 2% last year.
The post Is ransomware finally on the decline? Treasury data offers cautious hope appeared first on CyberScoop.
Le gouvernement a tenu une réunion d'urgence présidée par le vice‑premier ministre et ministre du ministère de la Science et des technologies de l'information et de la communication (MSTIC) concernant l'incident de violation chez Coupang et la fuite de données personnelles.Lors de la réunion du 30 n...
The FBI warns of criminals altering images shared on social media and using them as fake proof of life photos in virtual kidnapping ransom scams. The FBI warns that criminals are altering publicly available photos to create fake “proof-of-life” images used in virtual kidnapping scams, posing as kidn...
A procurement team throws a small party. They’ve shaved millions off the supplier budget. The CFO beams. The board applauds. Six months later, a cyber incident or supply disruption wipes out those savings in days. The champagne glow fades.
This is not fiction. It happens ev...