> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
La société Thermofin a été victime d'une attaque cybernétique massive, entraînant des fuites de données, y compris des informations sur les employés. L'entreprise est actuellement seulement accessible de manière limitée via une hotline. Les filiales en Chine et en Pologne sont également touchées.
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Herker.
One of the reasons we opposed the TikTok "ban" is that the First Amendment is supposed to protect us from government using its power to manipulate speech. But as predicted, the TikTok "ban" has only resulted in turning over the platform to the allies of a president who seems to have no respect for t...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes du Turf Valley Resort.
Lumena Financial Strategies suffered a data breach after a threat actor accessed their computer systems using ransomware. The breach occurred on September 23, 2025, and potentially exposed client information including names, dates of birth, home addresses, social security numbers, banking informatio...
SEO poisoning campaign "Operation Rewrite” uses a malicious IIS module called BadIIS to redirect users to unwanted websites.
The post Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign appeared first on Unit 42.
InsightinHealth, Inc. suffered a data breach after an unauthorized actor gained access to their network by exploiting a previously unknown vulnerability in a third-party application. The breach occurred between September 17, 2025, and September 23, 2025, and may have impacted certain files stored on...
October 1, 2025: This post was updated to reflect the new name of Security Hub, which is AWS Security Hub CSPM (Cloud Security Posture Management). Security teams must efficiently validate and document exceptions to AWS Security Hub (Cloud Security Posture Management, previously known as Security Hu...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
This is the fourth installment in a blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
One of the goals of our Stop Censoring Abortion campaign was to put names, stories, and numbers to the experiences we’d been hearing about: peopl...
LinkedIn will share your public data with Microsoft to train AI. Find what this means for your privacy and how to opt out.
Experts at a Gartner event highlighted areas of focus in identity, processes and third-party risk management to tackle the novel tactics employed by Scattered Spider
Le conseil d’administration du 19 septembre 2025 a élu Odile Duthil à la présidence du Clusif. Loïc Guézo, Anne Doré, Michel Dubois ont été réélus au bureau. « Je remercie Benoît Fuzeau pour son engagement et tout le travail réalisé. Sous sa présidence, le Clusif a acquis une nouvelle dimension nat...
MITRE said it understands why Microsoft, SentinelOne and Palo Alto pulled out of its 2025 of ATT&CK Evaluations test – and promises to do better next year
Nimbus Manticore Deploys New Malware Targeting Europe Key Findings Introduction Since early 2025, Check Point Research (CPR) has tracked waves of Nimbus Manticore activity. Known as UNC1549 or Smoke Sandstorm, Nimbus Manticore is a mature Iran-nexus APT group that primarily targets aerospace and def...
Police are using their drones as flying automated license plate readers (ALPRs), airborne police cameras that make it easier than ever for law enforcement to follow you.Â
"The Flock Safety drone, specifically, are flying LPR cameras as well,” Rahul Sidhu, Vice President of Aviation at Flock Safety,...
REMPAR25 : un exercice de crise cyber d’une ampleur inédite
anssiadm
lun 22/09/2025 - 11:47
Jeudi 18 septembre 2025, l’ANSSI a organisé REMPAR25, un exercice national de gestion de crise cyber de grande ampleur, en partenariat avec le Campus Cyber national, les campu...
What you see is not always what you get as cybercriminals increasingly weaponize SVG files as delivery vectors for stealthy malware
The FBI has warned that adversaries have published fake versions of its cybercrime reporting portal IC3