> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.4. The following CVEs are assigned: CVE-2025-10644.
This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.1. The following CVEs are assigned: CVE-2025-10643.
You’ve trained the model, packaged it on Red Hat OpenShift AI, and it’s ready to work. The next move is exposing it through an API so people and applications can use it. At that moment, your model stops being an internal experiment and becomes a front-door service. And like any front door, somebody...
Pro-Partner a reçu un e-mail de ransomware anonyme, l'entreprise a signalé l'incident à la police et a activé ses mécanismes de sécurité pour renforcer ses protections. L'enquête est en cours et les principaux systèmes n'ont pas été compromis. Pro-Partner va coopérer avec la police pour élucider l'i...
Madeira USA LLC suffered a security incident involving unauthorized access to certain servers within its network, resulting in potential exposure of personal information. The incident occurred on October 8, 2025, and was discovered on the same day. Madeira has taken steps to enhance its security mea...
Cloud breaches are rising. This step-by-step guide from Unit 42 shows how to investigate, contain and recover from cloud-based attacks.
The post Responding to Cloud Incidents: A Step-by-Step Guide From the 2025 Unit 42 Global Incident Response Report appeared first on Unit 42.
A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data stolen from dozens of Fortune 500 firms if they refuse to pay a ransom. The group also claimed responsibility...
Privacy laws are only as strong as their enforcement. In California, the state’s privacy agency recently issued its largest-ever fine for violation of the state’s privacy law—and all because of a consumer complaint.
The state’s  privacy law, the California Consumer Privacy Act or CCPA, requires many...
The California Privacy Protection Agency (CPPA) issued a record fine earlier this month to Tractor Supply, the country’s self-proclaimed largest “rural lifestyle” retailer, for apparently ducking its responsibilities under the California Consumer Privacy Act. Under that law, companies are required t...
Microsoft Copilot, not so much Employees could be opening up to OpenAI in ways that put sensitive data at risk. According to a study by security biz LayerX, a large number of corporate users paste Personally Identifiable Information (PII) or Payment Card Industry (PCI) numbers right into ChatGPT, ev...
The Qilin group claims to have stolen sensitive personal and proprietary data from the Brewer
The federal contract shows ICE spent $825,000 on vans equipped with “cell-site simulators” which allow the real-world location tracking of nearby phones and their owners.
Threat actors seek to abuse Microsoft Teams features and capabilities across the attack chain, underscoring the importance for defenders to proactively monitor, detect, and respond effectively. In this blog, we recommend countermeasures and optimal controls across identity, endpoints, data apps, and...
Amazon Web Services (AWS) has released a new whitepaper: Security Overview of Amazon EKS Auto Mode, providing customers with an in-depth look at the architecture, built-in security features, and capabilities of Amazon Elastic Kubernetes Service (Amazon EKS) Auto Mode. The whitepaper covers the core...
Blockchain monitoring firm Elliptic said this year’s total is already an all-time record for the North Korean regime.
No fraud monitoring and no apology after miscreants make off with medical, financial data Florida-based Doctors Imaging Group has admitted that the sensitive medical and financial data of 171,862 patients was stolen during the course of a November 2024 cyberattack.…
Microsoft Secure Future Initiative (SFI) patterns and practices are practical, actionable, insights from practitioners for practitioners based on Microsoft’s implementation of Zero Trust through the Microsoft Secure Future Initiatives. By adopting these patterns, organizations can accelerate their s...
Florida comms outfit serving cops, firefighters, and the military says hackers pinched some employee data but insists its systems stayed online BK Technologies, the Florida-based maker of mission-critical radios for US police, fire, and defense customers, has confessed to a cyber intrusion that brie...
It also banned some suspected Russian accounts trying to create influence campaigns and malware OpenAI has banned ChatGPT accounts believed to be linked to Chinese government entities attempting to use AI models to surveil individuals and social media accounts.…
The NCSC’s contribution to the Internet Engineering Task Force will help to make the internet more secure.