> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
The Scattered LAPSUS$ Hunters hacking group claims to have accessed data from around 40 customers of Salesforce, the cloud-based customer relationship management service, stealing almost one billion records.
Read more in my article on the Fortra blog.
Modeling scammers are reinventing old tricks for the social media age—targeting not just the young, but older adults too.
84 million requests a second means even rare bugs appear often. We'll reveal how we discovered a race condition in the Go arm64 compiler and got it fixed.
Foreign threat actors adopting ChatGPT to bolster “old playbook” of attacks, OpenAI finds But, in what may be considered good news for security teams, the AI start-up also says most threat actors appear to be playing it safe and sticking with “tried and true” methods previously used to carry out th...
Why you should act now to ensure you meet the new hardware standards, and prioritise security.
A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT
Berlin's opposition likely kills off Brussels' bid to scan everyone's messages Germany has committed to oppose the EU's controversial "Chat Control" regulations following huge pressure from multiple activists and major organizations.…
Cryptographie post-quantique, les travaux de l’ANSSI
anssiadm
mer 08/10/2025 - 12:34
Accompagner la transition vers la cryptographie post-quantique : l’ANSSI présente ses travaux et sa Fà Q dédiée, en faveur d’une mobilisation collective pour répondre à un enjeu majeu...
According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest
Scammers are sending emails purporting to be from major airlines/airports trying to swindle money by demanding refundable deposits.
Jaguar Land Rover has reported a 25% drop in volume sales in the three months up to September 30, largely due to the impact of the ongoing cyber incident
Never rely on just a password, however strong it may be. Multi-factor authentication is essential for anyone who wants to protect their online accounts from intruders.
As the go-to cybersecurity expert for your friends and family, you’ll want to be ready for those “I clicked a suspicious link — now what?” messages. Share this quick guide to help them know exactly what to do next.
Unit 42 discovers ClickFix phishing kits, commoditizing social engineering. This kit presents a lowered barrier for inexperienced cybercriminals.
The post The ClickFix Factory: First Exposure of IUAM ClickFix Generator appeared first on Unit 42.
North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic
Join Cellebrite’s 30-minute Autumn 2025 Release webinar to explore the latest digital forensics innovations, new tools, and expert insights — register now to save your spot!
Two 17-year-olds have been arrested following a cyber-attack on the Kido nursery group
Corrected Article links in the Security Updates table. This is an informational change only.
How organisations can improve their ability to both detect and discover cyber threats.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-11466.