> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
The initial investigation shows early signs of links with the FIN11 and Clop cyber extortion groups
Founder and Investor Bundle savings for TechCrunch Disrupt 2025 end tomorrow, October 3. Groups of 4–9 founders save 15% and investors save 20%. Access top VCs, pitch-ready startups, and hands-on sessions.
The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like AnonDoor
A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws
We examine a new wave of phishing attacks targeting WhatsApp users, and explain how to avoid getting hacked.
Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses
Cisco Talos is disclosing details on UAT-8099, a Chinese-speaking cybercrime group mainly involved in SEO fraud and theft of high-value credentials, configuration files, and certificate data.
Forrester predicts agentic AI will be responsible for a major data breach in 2026
ESET researchers have discovered campaigns distributing spyware disguised as Android Signal and ToTok apps, targeting users in the United Arab Emirates
ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year
Le MOOC « SecNumacadémie » en cours d’évolution
anssiadm
jeu 02/10/2025 - 07:42
Le MOOC de l’ANSSI SecNumacadémie va évoluer et ne sera plus disponible sur la plateforme en ligne à partir du 28 février 2026. Dans les mois qui suivront, une nouvelle plateforme de form...
Alors que les élèves sont maintenant retournés en classe, il est essentiel que les administrateurs et les équipes IT restent vigilants face aux acteurs malveillants opportunistes.
Standardizing your company’s operating environment starts with the operating system (OS), but it doesn’t end there. As the number of systems grows, configurations drift, maintenance becomes repetitive, and updates can quickly turn into a headache. At Red Hat, we support your standardization journey...
We are writing to provide an update regarding a security incident related to a specific GitLab environment used by our Red Hat Consulting team. Red Hat takes the security and integrity of our systems and the data entrusted to us extremely seriously, and we are addressing this issue with the highest...
Le centre médical a été victime d'une attaque informatique impliquant Qilin. Les opérations ont continué normalement, mais les experts examinent si des données sensibles ont été compromises. Le centre médical Shamir a été touché, mais aucune information n'a été divulguée sur les conséquences de l'at...
Le département de la sécurité intérieure enquête sur une faille de sécurité dans le district scolaire de Moscow, les opérations scolaires se poursuivent malgré les perturbations. Le superintendent Shawn Tiegs a confirmé que l'intrusion dans le réseau interne du district a eu lieu la semaine dernière...
Researchers uncovered a security flaw in Salesforce’s shiny new Agentforce. The vulnerability, dubbed "ForcedLeak", let them smuggle AI-read instructions in via humble Web-to-Lead form... and ended up spilling data for the low, low price of five dollars.
And we discuss why data breach communicati...
Every day, corporations track our movements through license plate scanners, building detailed profiles of where we go, when we go there, and who we visit. When they do this to us in violation of data privacy laws, we’ve suffered a real harm—period. We shouldn’t need to prove we’ve suffered additiona...
Most of the apps on your phone are talking to a server somewhere - sending and receiving data through messages sent through APIs, the underlying infrastructure that allows apps to communicate.
And here's the problem - hackers have determined that the APIs of mobile apps, when left visible and exp...
The Financial Times reports that the U.K. is once again demanding that Apple create a backdoor into its encrypted backup services. The only change since the last time they demanded this is that the order is allegedly limited to only apply to British users. That doesn’t make it any better.
The demand...