**\[Mise à jour du 11 avril 2025\]** Le CERT-FR a connaissance d'une preuve de concept publique permettant de provoquer une exécution de code arbitraire à distance. **[Mise à jour du 04 avril 2025]** Le CERT-FR a connaissance d'une preuve de concept publique permettant de provoquer un arrêt du...
Le 17 avril, une cyberattaque contre Manchester Credit Union a été revendiquée sur le site vitrine de l'enseigne de rançongiciel Sarcoma. Le 3 avril, l'établissement financier disait rencontrer "actuellement des difficultés techniques qui affectent les paiements entrants". Des usagers déploraient pa...
Cumberland County Hospital a subi une attaque de ransomware qui a affecté 36 659 patients, les informations personnelles et médicales ont été compromises. L'hôpital a immédiatement pris des mesures pour contenir l'incident et a offert des services de surveillance de crédit et de protection contre la...
Dans un contexte de prolifération des menaces ciblant les téléphones mobiles, l’ANSSI préconise d’adopter 10 règles de bonnes pratiques pour l’utilisation de ces équipements.
Unauthorized access to the network occurred between March 31 and April 3, 2025, resulting in the acquisition of certain files containing personal information. The investigation determined that one or more of the files contained the name and Social Security number of one Maine resident. The attack wa...
A ransomware attack via social engineering on a Madison employee resulted in the exposure of affected individuals' personal information. The incident occurred on or about April 7, 2025. The attack was claimed by Interlock.
With the proliferation of threats targeting mobile phones, ANSSI recommands adopting 10 best practice rules for using these devices.
Revolution Dancewear experienced a data security incident where an unauthorized party accessed internal systems from March 16, 2025, to April 3, 2025, potentially impacting personal information. The company is offering complimentary credit monitoring and identity restoration services. No reports of...
Known Issues
Adding duplicate DHCP reservations in Web UI causes a loss of DHCP settings
Endpoint Security error status 0xc0000428 on Windows 11 endpoints with Microsoft KB5052093 when they run dism.exe or sfc.exe
WatchGuard Cloud managed access points detected as an Evil Twin false positive
Cannot...
A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages
A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users
We were informed this week that our digital book distributor (Sendowl) will be terminating our distribution plan on April 24th, 2025 and will be forcing migration into their new structure at that time. This new plan eliminates the option to send readers free PDF updates and applies a 6-fold overall...
Gray bots surge as generative AI scraper activity increases, impacting web applications with millions of requests daily
Hackers stole $1.67bn of cryptocurrencies in the first quarter of 2025, a 303% increase
The NCSC’s CEO, Richard Horne on the new cyber governance resources giving Boards the tools they need to govern cyber security risks.
Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion
Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025
Une cyberattaque par ransomware a frappé le bureau du défenseur public fédéral de l'Arizona, entraînant la perte d'accès aux fichiers de l'affaire de Ralph Menzies, condamné à mort. La défense a demandé et obtenu un délai pour déposer un mémoire sur la compétence mentale de Menzies, initialement pré...
The UK’s data protection regulator says it is overwhelmed with complaints from the public
PAC Strapping Products, Inc. experienced a ransomware incident that may have affected personal information, including names, credit/debit card numbers, and expiration dates. The company has taken measures to prevent a similar incident and is offering free credit monitoring services. The incident occ...