> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
Boyd Gaming Corporation a subi une faille de sécurité informatique, une partie non autorisée a accédé à son système informatique interne, mais cela n'a pas eu d'impact sur les propriétés ou les opérations commerciales de l'entreprise. La société a pris des mesures pour répondre à l'incident et avert...
Le groupe immobilier KWG a été victime d'une attaque de hackers, ce qui a conduit à une tentative d'extorsion. Les enquêtes sont en cours et les conséquences pour les locataires sont encore incertaines. L'entreprise KWG est basée à Senftenberg en Allemagne.
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".
L'entreprise Jenz a été victime d'une cyberattaque qui a exploité une faille de sécurité dans leur pare-feu, entraînant une interruption de leur activité pendant environ dix jours. L'attaque a eu un impact significatif sur l'entreprise, qui réalise un chiffre d'affaires de 115 millions d'euros. Les...
BK Technologies Corporation a détecté une activité suspecte dans ses systèmes d'information, une enquête a été lancée et les systèmes affectés ont été isolés. L'incident a eu un impact mineur sur les opérations de l'entreprise et une partie des coûts devraient être remboursés par les assurances. L'e...
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".
Greenhouse Apartments experienced a data incident that may have affected personal information, with no evidence of misuse. The incident occurred between September 20, 2025, and September 21, 2025. Free credit monitoring services are being provided to affected individuals. A cyberattack was claimed b...
Hematology Oncology Consultants, une clinique médicale spécialisée en oncologie et maladies du sang, a subi une violation de données suite à une attaque par rançongiciel. Cette cyberattaque, dont la responsabilité a été revendiquée par le groupe Rhysida, a exposé des informations sensibles telles qu...
Amazon Web Service (AWS) recently announced that AWS Organizations now offers full AWS Identity and Access Management (IAM) policy language support for service control policies (SCPs). With this feature, you can use conditions, individual resource Amazon Resource Names (ARNs), and the NotAction elem...
Lautrec, Ltd. suffered a data breach on September 20, 2025, where certain files within their network were accessed and copied without authorization. The breach involved the exposure of personal information, including names and Social Security numbers. A cyberattack was claimed by Akira on October 7.
Courts jail BreachForums operator, China’s TA415 ramps up phishing espionage, and Chaos Mesh flaws risk full Kubernetes cluster takeovers.
Amazon Web Services (AWS)Â is pleased to announce that the Summer 2025 System and Organization Controls (SOC) 1 report is now available. The report covers 183 services over the 12-month period from July 1, 2024 to June 30, 2025, giving customers a full year of assurance. The reports demonstrate our c...
This is the third installment in a blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
Imagine sharing information about reproductive health care on social media and receiving a message that your content has been removed for violatin...
ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations
Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing
Sophos classé N°1 dans 47 Rapports Globaux.
Notorious APT group Turla collaborates with Gamaredon, both FSB-associated groups, to compromise high‑profile targets in Ukraine
Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-10585 exists in the wild.
28-year-old Daniel Lee Newhard, an American citizen living in Estonia, has been charged in relation to the notorious hack of Vastaamo, the biggest data breach in Finnish history.
Read more in my article on the Hot for Security blog.