> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights several key threats and trends. Attackers exploiting the FortiBleed vulnerability are locking victims out of Fortinet devices by creating new accounts and deleting existing credentials. A critical flaw in Atlassian products allows unauthorized file access, urging immediate patching. The npm package "tensorlake" has been compromised to deliver a credential-stealing worm, raising concerns about supply chain security. Meanwhile, a significant number of vulnerabilities have been discovered and patched in Java libraries by IBM and Red Hat. Additionally, SonicWall has disclosed a severe flaw with a CVSS score of 10, indicating a serious security pattern. Overall, the ongoing risks emphasize the importance of proactive security measures and timely updates in the face of evolving threats.
|
// AI-powered summary generated at 08:00
La société australienne Natures Organics a confirmé avoir été victime d'une cyberattaque par le groupe de ransomware Medusa, qui a volé des données personnelles de ses employés, notamment des scans de passeports et de permis de conduire. Les hackers menacent de publier les données si une rançon de 1...
On January 30, 2025, AOA detected unusual network activity and engaged cybersecurity experts. The investigation found that certain data, including personal and protected health information, may have been acquired without authorization between January 22 and January 30, 2025. AOA secured its systems,...
Posted by Bethel Otuteye and Khawaja Shams (Android Security and Privacy Team), and Ron Aquino (Play Trust and Safety)
Android and Google Play comprise a vibrant ecosystem with billions of users around the globe and millions of helpful apps. Keeping this ecosystem safe for users and developers rem...
Shields Facilities Maintenance, LLC. experienced a data breach where an unauthorized party accessed files on their system between January 28, 2025, to January 30, 2025, resulting in the exposure of names and Social Security numbers. A cyberattack against Shields Facilities Maintenance has been claim...
The organization suffered a data breach where an unauthorized individual copied certain files containing personal and protected health information. The breach was discovered on January 30, 2025, and the organization notified potentially impacted individuals on December 10, 2025. The organization is...
AI-related API vulnerabilities surged 1,205% in 2024, with 99% tied to API flaws, according to a new report by Wallarm
Google highlighted significant abuse of its Gemini LLM tool by nation state actors to support malicious activities, including research and malware development
ESET PROTECT version 6.1 has been released.
Cato Networks highlighted how the recently emerged HellCat ransomware group is using novel psychological tactics to court attention and pressurize victims
Cybercriminals exploit government websites using open redirects and phishing tactics, bypassing secure email gateway protections
Posted by the Agentic AI Security Team at Google DeepMindModern AI systems, like Gemini, are more capable than ever, helping retrieve data and perform actions on behalf of users. However, data from external sources present new security challenges if untrusted sources are available to execute instruc...
Government agencies and privacy watchdogs have started investigating the Chinese AI chatbot provider over data privacy concerns
ReliaQuest warns threat actor innovation and infostealer activity helped to accelerate breakout time by 22% in 2024
La société Flashforge, spécialisée dans les imprimantes 3D, a été victime d'une cyberattaque qui a compromis son service en ligne Flash Cloud, entraînant la perte de données utilisateur. Les détails de l'attaque et de l'étendue des dommages ne sont pas encore connus. Les utilisateurs de Flash Cloud...
The National Audit Office warns of major gaps in cyber resilience across UK government departments
La Commission du revenu interne de Papouasie-Nouvelle-Guinée (IRC) a été victime d'une importante cyberattaque, qui a mis hors ligne ses systèmes et pourrait avoir exposé des données sensibles appartenant à des centaines de milliers de personnes et d'entreprises. L'IRC n'a pas encore informé le publ...
La société italienne Fashion Box, connue sous le nom de Replay, a été victime d'une cyberattaque le 29 janvier 2025, lorsqu'un hacker a réussi à accéder à ses serveurs en utilisant une méthode d'attaque par force brute. L'attaque a permis au pirate de s'emparer de données confidentielles, notamment...
ESET Mail Security for Microsoft Exchange Server version 11.1.10009.0 and ESET Security for Microsoft SharePoint Server version 11.1.15003.0 have been released and are available for download from the ESET website or upgrade from ESET PROTECT repositories.
Une cyberattaque a touché le centre de chirurgie plastique Hand & Plastic Surgery Centre au Michigan, affectant près de 20 000 patients, avec des informations personnelles et de santé protégées exposées. Deux autres entreprises, Dove Healthcare au Wisconsin et Southeast Series of Lockton Companies e...
Unauthorized access to some of ACCC's systems occurred on January 29, 2025, resulting in the acquisition of personal information, including names and financial account numbers. The breach affected 94 Maine residents. ACCC has taken steps to enhance the security of its computer network.