> TODAY'S SUMMARY (179 articles)
Today's cybersecurity landscape reveals several significant threats and trends. United Airlines has restricted the use of AI agents for flight bookings due to concerns over credential sharing and potential unauthorized purchases. Maersk confirmed a data breach attributed to the WhiteArmor ransomware group, which is demanding a $5 million ransom after exploiting a legacy system. A critical zero-day vulnerability in Microsoft's Windows SignDrop allows local users to gain SYSTEM privileges, raising alarms for affected systems. Additionally, cybersecurity researchers uncovered a credential theft campaign that targeted over 60,000 GitHub repositories, utilizing hijacked accounts to deploy malware. Finally, new vulnerabilities in various software, including Apache and MongoDB, highlight the ongoing need for vigilant patch management and security practices.
|
// AI-powered summary generated at 20:00
Information published.
Information published.
Un système informatique d'une institution publique a été victime d'une attaque, mais les données sensibles n'ont pas été compromises, et les systèmes ont été restaurés grâce à des sauvegardes. Les personnes potentiellement affectées ont été informées, et des mesures de sécurité supplémentaires ont é...
Information published.
Information published.
KMS Solutions, LLC experienced a data security incident involving unauthorized access to certain information within their systems between November 27, 2025, and December 7, 2025. The types of information that may have been impacted include first and last name, financial account information, and Soci...
Information published.
Information published.
Quatrro Business Support Services, Inc. experienced a security incident where unauthorized access occurred to certain files from November 11-19, 2025. The investigation revealed that the files contained personal information of two Maine residents. Quatrro is offering complimentary credit monitoring...
Information published.
Information published.
Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already compromised over 30 organizations across multiple sectors. [...]
Information published.
Information published.
Un scan du Web effectué par The Shadowserver Foundation montre que plus de 77 000 adresses IP, dont 4 710 en France, sont vulnérables à la faille React2Shell.
Le post React2Shell : 4 700 serveurs vulnérables en France, plus de 77 000 dans le monde ! a été publié sur IT-Connect.
Information published.
Information published.
A hacking campaign is targeting GlobalProtect logins and scannig SonicWall APIs since December 2, 2025. A campaign began on December 2 targeting Palo Alto GlobalProtect portals with login attempts and scanning SonicWall SonicOS API endpoints. The activity came from over 7,000 IPs tied to German host...
Information published.