> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
Learn how to write a proper email for all situations — big or small — and get your message noticed with these customizable templates.
California has one of the nation’s most comprehensive consumer data privacy laws. But it’s not always easy for people to exercise those privacy rights. That’s why we supported Assemblymember Josh Lowenthal’s A.B. 566 throughout the legislative session and are now asking California Governor Gavin New...
Self-replicating worm “Shai-Hulud” has compromised hundreds of software packages in a supply chain attack targeting the npm ecosystem. We discuss scope and more.
The post "Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated September 23) appeared first on Unit 42.
Talos discovered that a new PlugX variant’s features overlap with both the RainyDay and Turian backdoors
This is Part I of a two-part series on EFF’s comments to the International Criminal Court Office of the Prosecutor (OTP) about its draft policy on cyber-enabled crimes.As human rights atrocities around the world unfold in the digital age, genocide, war crimes and crimes against humanity are as heino...
Security and governance teams across all environments face a common challenge: translating abstract security and governance requirements into a concrete, integrated control framework. AWS services provide capabilities that organizations can use to implement controls across multiple layers of their a...
Nimbus Manticore intensified European cyber-espionage, targeting aerospace, telecom, defense sectors
In episode 69 of The AI Fix, our hosts discover brain rot, a shark wears trainers on its fins, an AI writes a terrible J-Pop song, Graham learns that ants don’t care about AI, Mark predicts the precise date of Graham’s demise, Norway trusts $1.9 trillion to an AI investor, and Florida thins out its...
Gartner research found that 62% of organizations have experienced a deepfake attack in the past 12 months
Rising hardware, API, and network flaws expose organizations to new risks in an AI-driven landscape
The Network and Information Security Directive 2 (NIS2) is the European Union's latest framework for strengthening cyber security resilience across critical sectors.
If your organization falls within the scope of NIS2, understanding its requirements and ensuring compliance is crucial to avoiding pe...
ReliaQuest report claims time from initial access to lateral movement has shrunk to just 18 minutes
Stellantis confirmed that customers’ personal information was potentially exposed
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
UK carmaker Jaguar Land Rover has said production will remain shuttered until October 1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The followi...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Web Help Desk. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-26399.
Le systèmes informatiques du Comune di Forlì ont été victimes d'une attaque non autorisée, mais aucune preuve de fuite de données personnelles n'a été trouvée pour le moment. Les procédures de sécurité ont été activées et des vérifications techniques sont en cours. Certains systèmes et services numé...
This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Some interaction on the part of an administrator i...
Okuma Europe GmbH, une filiale d'Okuma Corporation, a subi une attaque de ransomware, ce qui a entraîné une infection de son serveur et un risque possible d'exfiltration de données personnelles et d'informations confidentielles. L'entreprise travaille actuellement avec des experts externes pour enqu...