> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Volume Transportation, Inc. experienced a network disruption on August 19, 2025, which led to unauthorized access to certain files. A cyberattack against Volume Transportation was claimed by Qilin on September 15.
Fieldtex Products, Inc. a signalé une faille de sécurité dans ses systèmes informatiques, ce qui a pu compromettre des informations de santé protégées, notamment des noms de patients, des adresses et des numéros d'identification d'assurance. L'entreprise a pris des mesures pour sécuriser son réseau...
In July 2025, Allianz Life was the victim of a cyber attack which resulted in millions of records later being leaked online. Allianz attributed the attack to "a social engineering technique" which targeted data on Salesforce and resulted in the exposure of 1.1M unique email addresses, names, genders...
Cohen & Sprung Associates, LLC experienced a network disruption on August 19, 2025, which led to unauthorized access to certain files. The investigation found that the files contained sensitive information such as Social Security numbers, driver's license numbers, and financial account information....
Shwapno, une chaîne de supermarchés, a déposé une plainte le 28 mars 2026 concernant une cyberattaque survenue sept mois plus tôt, suite au piratage de sa base de données clients. L'attaque, orchestrée par des groupes criminels internationaux comme Qilin et LockBit 5.0, a débuté par des e-mails d'ha...
The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q Developer), which is a very popular coding agent, with over 1 million downloads.
It is vulnerable to prompt injection from untrusted data and its security depends heavily on model beha...
Why sharing lessons learned from cyber security incidents and ‘near misses’ will help everyone to improve
An incident involving the npm package eslint-config-prettier has been uncovered spreading Scavenger RAT
A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell
We've just deployed some mega updates to our infrastructure at Report URI that will give us much more resilience in the future, allow us to apply updates to our servers even faster, and will probably go totally unnoticed from the outside!Our previous Redis setupI've
Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities
The Warlock ransomware gang has taken credit for the cyber-attack after the UK telco giant publicly confirmed an incident on August 14
Can you tell the difference between legitimate marketing and deepfake scam ads? It’s not always as easy as you may think.
Al-Tahery Al-Mashriky has been sentenced to 20 months behind bars for hacktism-related offenses
Workday has revealed a breach of its third-party CRM systems in what could be the latest ShinyHunters attack
Updated first FAQ to state that CVE-2020-0674 has now been issued to address this vulnerability. This is an informational change only.
Tenda AC20 16.03.08.12 - Command Injection
Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
Le Département de l'Aude a été victime d'une cyberattaque, les données des usagers, partenaires et fournisseurs des services sociaux départementaux ont été volées. Les usagers sont invités à changer leur mot de passe et à rester vigilant face à toute requête suspecte. Une plainte a été déposée et de...
Soosyze CMS 2.0 - Brute Force Login