[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 08:00

> Discord users’ data stolen by hackers in third-party data breach
Discord has confirmed that users who contacted its customer support service have had their data stolen by hackers, who have attempted to extort a ransom from the company. Read more in my article on the Hot for Security blog.
> Radiant Group won't touch kids' data now, but apparently hospitals are fair game
Ransomware crooks utterly fail to find moral compass First they targeted a preschool network, now new kids on the ransomware block Radiant Group say they've hit a hospital in the US, continuing their deplorable early cybercrime careers.…
> Detecting DLL hijacking with ML | Kaspersky official blog
The Kaspersky Unified Monitoring and Analysis Platform can now detect DLL hijacking using an ML model.
> InfoSec News Nuggets 10/06/2025
Oracle says hackers are trying to extort its customers Oracle said on Thursday that customers of its E-Business Suite of products “have received extortion emails,” confirming a warning first issued on Wednesday, opens new tab by Alphabet’s Google. In a blog post, opens new tab, the California-based...
> Thieves steal IDs and payment info after data leaks from Discord support vendor
Outsourcing your helpdesk always seems like a good idea – until someone else's breach becomes your problem Discord has confirmed customers' data was stolen – but says the culprit wasn't its own servers, just a compromised support vendor.…
> Jaguar Land Rover engines ready to roar again after weeks-long cyber stall
No confirmed date but workers expected to return in the coming days Jaguar Land Rover is readying staff to resume manufacturing in the coming days, a company spokesperson confirmed to The Reg.…
> Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way.
> Scanning of Palo Alto Portals Surges 500%
Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals
> 6th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 6th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Red Hat has confirmed a cyber attack that resulted in unauthorized access to one of its GitLab instances. The attackers, Crimson Collective, claim to h...
> Clop crew hits Oracle E-Business Suite users with fresh zero-day
Big Red rushes out patch for 9.8-rated flaw after crooks exploit it for data theft and extortion Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business Suite (EBS) that criminal crew Clop has already abused for data theft and extortion.…
> Asahi Confirms Ransomware Attack, Data Stolen from Servers
Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption
> Beware of threats lurking in booby-trapped PDF files
Looks can be deceiving, so much so that the familiar icon could mask malware designed to steal your data and money.
> Leak suggests US government is fibbing over FEMA security failings
Plus, PAN under attack, IT whistleblowers get a payout, and China kills online scammers Infosec in brief  On August 29, the US Federal Emergency Management Agency fired its CISO, CIO, and 22 other staff for incompetence but insisted it wasn't in response to an online attack. New material suggests FE...
> Exterro Launches FTK Imager Pro, Unlocking Faster Access To Encrypted Evidence For Investigators Worldwide
Exterro launches FTK Imager Pro with live decryption, iOS collection, and instant evidence preview—cutting acquisition from hours to minutes.
> Renault Informs Customers of Supply Chain Data Breach
Renault and Dacia have become the latest big-name brands to suffer a supply chain breach
> CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability (now tracked as CVE-2025-61882)
> Weekly Update 472
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This probably comes through pretty strongly in this week's video, but I love the vibe at CERN. It's a place so focused on the common good of science that all the other cultural attributes...
> Présentation des Services de conseil Sophos (Sophos Advisory Services)
Découvrez comment vos réseaux, vos systèmes et vos employés résistent aux attaques simulées avant qu’un attaquant ne passe à l’action.
> ZDI-25-933: (Pwn2Own) Redis Lua Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-49844.
> Stadt Hohen Neuendorf
La ville de Hohen Neuendorf a été victime d'une attaque cybernétique, ce qui a entraîné la fermeture de ses systèmes informatiques et a affecté les services publics, notamment l'émission de passeports et de cartes d'identité. Les experts en sécurité travaillent à la rétablissement des systèmes et le...