> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
A list of topics we covered in the week of October 6 to October 12 of 2025
Cybersecurity researchers are calling attention to a new campaign that delivers the Astaroth banking trojan that employs GitHub as a backbone for its operations to stay resilient in the face of infrastructure takedowns.
"Instead of relying solely on traditional command-and-control (C2) servers that...
Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts.
"Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileged...
Une vulnérabilité a été découverte dans Belden HiOS Switch Platform. Elle permet à un attaquant de provoquer un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Une vulnérabilité a été découverte dans Oracle E-Business Suite. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
On Oct. 13, 2025, Jetobra discovered a data breach compromising sensitive data belonging to an unknown number of individuals. An investigation determined that a cybercriminal gained access to the company's internal network between Sept. 16, 2025 and Sept. 17, 2025.
Designs For Vision, Inc. experienced a data breach between October 11, 2025, and October 13, 2025, resulting in unauthorized access to certain computer systems and the theft of files. The breach involved the theft of personal data, including names and other data elements. A cyberattack was claimed b...
Blue Teal Holdings, LLC experienced unauthorized access to certain systems, resulting in the potential exposure of protected personal information. The incident occurred through current or previous relationships with Blue Teal Holdings' affiliates, subsidiaries, and other entities. The company is off...
Euronics XXL à Brackenheim a été victime d'une cyberattaque en octobre 2025, lui faisant rater les ventes de fin d'année. Le magasin, propriété de Schüle Handels GmbH a engagé une procédure de redressement en avril 2026.
BreachForums saisi. Scattered Spider maintient la pression. ZATAZ éclaire l’angle intégrations SaaS et les opérations françaises liées au forum....
292 responsables IT/Cybersécurité révèlent les expériences vécues actuellement face aux ransomwares par les établissements de santé.
Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data.
The vulnerability, tracked as CVE-2025-61884, carries a CVSS score of 7.5, indicating high severity. It affects versions from 12....
When a website fails, your browser returns an HTTP status code that’s short, technical, and often cryptic. You’ve probably seen 404 Not Found or 500 Internal Server Error. Less common, but just as disruptive, is 501 Not Implemented. This guide explains what a 501 error actually means, how it present...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This week's video was recorded on Friday morning Aussie time, and as promised, hackers dumped data the following day. Listening back to parts of the video as I write this on a Sunday morn...
Omrin said to be experiencing a technical malfunction due to a ransomware attack, and working hard to find a solution. It cannot be reached by telephone, but can be contacted by email. Omrin will honor existing appointments (bulky waste) as much as possible.
Le groupe DLSI a subi une cyberattaque sur deux de ses filiales, PRESTIM et ML Intérim, mais a pu récupérer toutes ses données sans altération. Les autres sociétés du groupe n'ont pas été impactées. Un dépôt de plainte et une notification à la CNIL ont été effectués.
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments.
"Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that th...