> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned:...
Stock in the Channel, une entreprise britannique, a subi une attaque de ransomware qui a entraîné la fermeture de son site web. Les attaquants ont exploité une vulnérabilité zero day dans l'une des applications tierces utilisées par l'entreprise. Selon l'entreprise, il n'y a actuellement aucune preu...
La société de télécommunications britannique Colt Technology Services est victime d'une cyberattaque qui a causé une panne de plusieurs jours de certaines de ses opérations. L'attaque a commencé le 12 août et les services tels que Colt Online et la plateforme Voice API sont toujours hors ligne. Les...
The attacks used spearphishing campaigns to target financial, manufacturing, defense, and logistics companies in Europe and Canada, ESET research finds
La ville de Lubbock a subi deux attaques informatiques cette année, dont une qui a fermé sa présence en ligne. Une attaque antérieure avait créé une fausse fenêtre contextuelle sur le site de paiement des services publics de la ville. Les autorités de la ville ont travaillé pour restaurer les systèm...
Le département de la sécurité publique du comté de Lycoming a détecté un logiciel de rançon sur son réseau informatique, ce qui pourrait avoir compromis les données, notamment les numéros de permis de conduire. L'enquête est en cours et les autorités ont sécurisé le réseau. Le comté prend des mesure...
A cyber-attack at Connex Credit Union has compromised data of 172,000 individuals, including sensitive information
A cyberattack was claimed by INC Ransom on September 3, 2025.
A flaw in WinRAR, tracked as CVE-2025-8088, has been exploited by the RomCom group to deploy malware
Four senior members of a Ghana-based criminal network have been indicted for stealing over $100 million through romance scams and BEC frau
Today we cover Claude Code and a high severity vulnerability that Anthropic fixed in early June. The vulnerability allowed an attacker to hijack Claude Code via indirect prompt injection and leak sensitive information from the developer’s machine, e.g. API keys, to external servers by issuing DNS re...
TRM Labs observed crypto payments worth $34.2m moved from victims addresses to a range of destinations likely associated with the group
So, a weird thing happened over the last couple of days, and my Tesla Powerwalls weren't working properly, or, at all, actually... What's even more strange is that Tesla has been completely silent about this and hasn't made a single announcement about the issue
Eight European countries have yet to transpose NIS2 into law, exposing them to regulatory action
ESET Research discovered a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application documents; the weaponized archives exploited a path traversal flaw to compromise their targets
Commercial red team experts believe AI’s current impact on cyber is overstated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS ra...
JetBrains TeamCity 2023.11.4 - Authentication Bypass
ServiceNow Multiple Versions - Input Validation & Template Injection
Yes24, le plus grand détaillant de billets et de livres en ligne de Corée du Sud, a subi une attaque de ransomware qui a mis son site Web et son application mobile hors ligne pendant plusieurs heures. Il s'agit de la deuxième attaque de ce type en moins de deux mois pour l'entreprise. Les services o...