> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
China on Sunday accused the U.S. National Security Agency (NSA) of carrying out a "premeditated" cyber attack targeting the National Time Service Center (NTSC), as it described the U.S. as a "hacker empire" and the "greatest source of chaos in cyberspace."
The Ministry of State Security (MSS), in a...
After years of working as part of a team, many military veterans look for work that still carries meaning, challenge, and purpose. Cybersecurity offers a new way to serve and protect on a different battlefield. Earlier this year, the Department of Veterans Affairs announced plans for staffing cuts,...
When you think of network tunneling, “lightweight” and “enterprise-grade” rarely appear in the same sentence. NodePass, an open-source project, wants to change that. It’s a compact but powerful TCP/UDP tunneling solution built for DevOps teams and system administrators who need to manage complex net...
China claims the US NSA hacked its National Time Service Center by exploiting staff phone flaws since March 2022, stealing sensitive data. China’s Ministry of State Security announced it has found “irrefutable evidence” that the US National Security Agency (NSA) conducted cyberattacks on its Nationa...
In this Help Net Security video, Carol Lee Hobson, CISO at PayNearMe, explores the realities behind the so-called cybersecurity “talent gap.” She explains why the issue is as much about hiring practices as it is about skills shortages, and offers practical strategies for closing both gaps, including...
Most MSPs agree that Microsoft 365 is now the backbone of business operations, but a Syncro survey shows that complexity, incomplete backups, and reactive security continue to slow their progress in managing it. About 60% of MSPs said Microsoft 365 powers more than 80% of their client base. This con...
OpenAI’s Sora 2 is here — and it’s not just another AI toy. This episode explores how Sora 2 works, how users can insert almost anything into generated content, and why that’s raising alarms about privacy, identity, and copyright. We walk you through the initial opt-out copyright controversy, the ba...
The Ministry of State Security alleged that the NSA exploited vulnerabilities in the messaging services of a foreign mobile phone brand to steal sensitive information.
The post China Accuses US of Cyberattack on National Time Center appeared first on SecurityWeek.
Learn how to use passkeys for secure and seamless sign-ins to websites and apps. Understand the benefits and implementation of passwordless authentication.
The post Using Passkeys to Sign In to Websites and Apps appeared first on Security Boulevard.
Learn how to effectively use Single Sign-On (SSO) to enhance security, improve user experience, and streamline access management within your organization. Discover best practices and implementation strategies.
The post How to Use Single Sign-on Effectively appeared first on Security Boulevard.
Shaun Mirani discovered that GStreamer Base Plugins did not correctly
handle certain memory operations. An attacker could possibly use this issue
to cause a denial of service.
Copilot Studio links look benign, but they can host content to redirect users to arbitrary URLs. In this post, we document a method by which a Copilot Studio agent's login settings can redirect a user to any URL, including an OAuth consent attack.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Une vulnérabilité a été découverte dans Microsoft Edge. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
La commune d'Untereisesheim a été victime d'une attaque informatique qui a crypté les contenus de son serveur, affectant ainsi l'ensemble de son infrastructure informatique. La commune travaille à minimiser les impacts sur les citoyens et à restaurer ses systèmes informatiques. Le Landeskriminalamt...
De multiples vulnérabilités ont été découvertes dans Tenable Identity Exposure. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Le comté de Kaufman au Texas a subi une attaque de sécurité qui a perturbé l'accès à certains systèmes informatiques du tribunal et aux dossiers des employés. Les autorités travaillent avec des experts en cybersécurité pour déterminer l'ampleur et la source de l'attaque. Les services d'urgence et le...
Le comté de Mitchell en Caroline du Nord a subi une attaque de ransomware en octobre, entraînant un accès non autorisé et le vol de données de santé du Département des services sociaux. Le comté a signalé des interruptions de téléphone et d'e-mail pendant cette période, les qualifiant de problèmes t...