> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New expat packages are available for Slackware 15.0 and -current to fix security issues.
AWS Network Firewall is a managed firewall service that filters and controls network traffic in Amazon Virtual Private Cloud (Amazon VPC). Unlike traditional network controls such as security groups or network access control lists (NACLs), Network Firewall can inspect and make decisions based on inf...
ESET PROTECT Hub v1.12.8 has been released.
This posted was drafted by EFF legal intern Alexandra Halbeck
The Court of Appeals for the Ninth Circuit, which covers California and most of the Western U.S., just delivered good news for digital privacy: abandoning a phone doesn’t abandon your Fourth Amendment rights in the phone’s contents. In Un...
It's easy to keep up with the fight for digital privacy and free expression. Our EFFector newsletter delivers bite-sized updates, stories, and actions you can take to stay informed and help out.
In this latest issue, we show how libraries and schools can safeguard their computers with Privacy Badger...
A guide to choosing the right EASM product for your organisation, and the security features you need to consider.
ESET PROTECT On-Prem 12.1, 12.0, 11.1 and 11.0 servicing update has been released.
This is the second instalment in a ten-part blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
During our Stop Censoring Abortion campaign, we set out to collect and spotlight the growing number of stories from people and organizati...
FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing
The Mexican government passed a package of outrageously privacy-invasive laws in July that gives both civil and military law enforcement forces access to troves of personal data and forces every individual to turn over biometric information regardless of any suspicion of crime. Â Â
The laws create a...
A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration
An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025
De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide
New IO research reveals a surge in AI attacks attempting to corrupt underlying training data
Chroma ATE a été victime d'une attaque de hackers, mais grâce à son équipe de sécurité et à la collaboration avec des professionnels, aucune information personnelle ou confidentielle n'a été divulguée. L'entreprise a activé ses mécanismes de défense et a renforcé la sécurité de son infrastructure. L...
A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned
Morrisroe Ltd a subi une attaque informatique, les données personnelles de ses employés, y compris les informations financières et bancaires, pourraient avoir été compromises. L'entreprise a pris des mesures pour contenir l'attaque et avertit ses employés de rester vigilants. L'attaque a été découve...
Unit 42 explores how innocent clicks can have serious repercussions. Learn how simply visiting a malicious site can expose users to significant digital dangers.
The post Myth Busting: Why "Innocent Clicks" Don't Exist in Cybersecurity appeared first on Unit 42.