> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
For the latest discoveries in cyber research for the week of 6th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Red Hat has confirmed a cyber attack that resulted in unauthorized access to one of its GitLab instances. The attackers, Crimson Collective, claim to h...
Big Red rushes out patch for 9.8-rated flaw after crooks exploit it for data theft and extortion Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business Suite (EBS) that criminal crew Clop has already abused for data theft and extortion.…
Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption
Looks can be deceiving, so much so that the familiar icon could mask malware designed to steal your data and money.
Plus, PAN under attack, IT whistleblowers get a payout, and China kills online scammers Infosec in brief On August 29, the US Federal Emergency Management Agency fired its CISO, CIO, and 22 other staff for incompetence but insisted it wasn't in response to an online attack. New material suggests FE...
Exterro launches FTK Imager Pro with live decryption, iOS collection, and instant evidence preview—cutting acquisition from hours to minutes.
Renault and Dacia have become the latest big-name brands to suffer a supply chain breach
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This probably comes through pretty strongly in this week's video, but I love the vibe at CERN. It's a place so focused on the common good of science that all the other cultural attributes...
Découvrez comment vos réseaux, vos systèmes et vos employés résistent aux attaques simulées avant qu’un attaquant ne passe à l’action.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-49844.
La ville de Hohen Neuendorf a été victime d'une attaque cybernétique, ce qui a entraîné la fermeture de ses systèmes informatiques et a affecté les services publics, notamment l'émission de passeports et de cartes d'identité. Les experts en sécurité travaillent à la rétablissement des systèmes et le...
La produtora Estação I et le canal IEL TV ont été la cible d'une tentative d'attaque cibernétique, mais l'équipe technique a réussi à contrôler la situation avec l'aide de la police. Les systèmes ont été récupérés sans préjudice permanent et la programmation suit son cours normal. L'entreprise a réa...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Alliance Roofing Company, Inc. experienced a network disruption on October 6, 2025, which led to unauthorized access to their network and potential acquisition of personal data. The breach involved names, Social Security Numbers, and Driver License Numbers. A cyberattack was claimed by Akira on Apri...
The law firm notified customers of a potential data breach, recommending they review account statements and credit reports, and consider placing a fraud alert or security freeze on their credit file.
Semaine intense sur le front de la cybersécurité mondiale. Cyber attaques, actions judiciaires et ambiances "vicieuses" chez les pirates. Voici le récap' cybersécurité zataz du 05 octobre 2025....
Les cyberattaques se multiplient au Maroc et ciblent désormais les acteurs du secteur privé, notamment le distributeur Alpha 55, un laboratoire pharmaceutique et le groupe Dislog. Plusieurs entreprises ont été visées depuis début octobre par une série d’attaques coordonnées. Le fondateur du groupe D...
Dans la nuit du 5 octobre 2025, soit à peine un an et demi après sa création, la jeune start-up d'IA innsbruckoise Localmind — qui fait alors confiance à plus de 150 entreprises et institutions — est frappée par une intrusion repérée à 5 h 43, alors que le CTO est à Vienne, que l'employee responsabl...
Known for its blazing fast internet and home to some of the world’s biggest tech giants, South Korea has also faced a string of data breaches and cybersecurity lapses that has struggled to match the pace of its digital ambitions.