> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
Heathrow, Brussels, Dublin and Berlin airports are among those disrupted by a cyber-attack on Collins Aerospace
Quand les gens nous posent la question suivante : "Les solutions Endpoint ne sont-elles pas toutes identiques de nos jours ? » notre réponse est simple : Non, elles ne le sont pas !
For the latest discoveries in cyber research for the week of 22nd September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Several major European airports including Heathrow, Berlin, Brussels, Dublin, and Cork have experienced a cyber-attack, resulting in disruptions to...
As the Cyber Resilience Act (CRA) is getting closer and companies wanting to sell digital services in goods within the EU need to step up, tighten their procedures, improve their documentation and get control over their dependencies I feel it could be timely to remind everyone: We of course offer fu...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
Le fabricant de outils de coupe TENRYU AMERICA, INC. a été victime d'une attaque de ransomware, ce qui a entraîné la cryptage de données sur son serveur. L'entreprise a isolé le serveur et travaille avec des experts en sécurité pour résoudre le problème. Aucune fuite de données de clients ou de part...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
Healthy Living suffered a ransomware attack on 9/22/2025, potentially accessing files containing personally identifiable information. The organization has seen no evidence of misuse, but is notifying staff in an abundance of caution. Staff are advised to monitor their credit reports and account stat...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Abusing IAM Roles Anywhere to obtain persistent AWS access from outside the cloud.
Abusing the CodeBuild managed GitHub Actions runner integration to obtain long‑term access to an AWS environment.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Imagine jumping on board a class action after your precious datas have been breached, then sticking through it all the way until a settlement is reached. Then, finally, after a long and a...
In October 2021, the now defunct Arabic language Anime website Animeify suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 808k unique email addresses along with names, usernames, genders and plain text passwords.
United Group a subi une attaque cybernétique visant ses filiales Vivacom et Mainstream Bulgaria en Bulgarie, mais les mesures de confinement ont permis de limiter l'impact. Les services de base de Vivacom, tels que la connectivité mobile et fixe, restent opérationnels. L'entreprise a condamné ces ac...
R3 Government Solutions, LLC experienced a data security incident that may have impacted some of their employees' personal information. The incident occurred on September 21, 2025, and was claimed by Devman on September 29.
In an era when email remains one of the most important forms of communication for business, commerce, and personal use, ensuring that emails reach their intended recipients (and don’t end up in spam, or worse, aiding cybercrime) is more important than ever. One of the often “behind‐the‐scenes” organ...
Waterborne Environmental, Inc. suffered a ransomware attack on September 21, 2025, which may have exposed personal information of its customers, including names, dates of birth, addresses, driver's license numbers, Social Security numbers, passport numbers, and benefits information. An attack agains...
TriMed, Inc. suffered a cybersecurity incident between September 13, 2025, and September 21, 2025, which may have involved personal information of individuals who received surgically implanted hardware. The incident was detected on March 27, 2026. A cyberattack was claimed by Lynx on October 2.