> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
La ville de La Vergne, dans le Tennessee, a subi un incident de réseau qui a perturbé certains systÚmes informatiques municipaux. Les autorités ont pris les systÚmes affectés hors ligne et ont fait appel à des experts en cybersécurité. Les services de police, d'incendie et d'eau ont continué à fonct...
ReadyTech Holdings Limited a Ă©tĂ© victime d'une attaque informatique touchant son systĂšme de gestion Ă©tudiante, VETtrak, les experts ont Ă©tĂ© dĂ©pĂȘchĂ©s pour gĂ©rer l'incident et une enquĂȘte a Ă©tĂ© lancĂ©e. L'entreprise a isolĂ© la plateforme pour des raisons de sĂ©curitĂ© et travaille avec les autoritĂ©s comp...
Microsoft's October Windows 11 updates have broken the "localhost" functionality, making applications that connect back to 127.0.0.1 over HTTP/2Â no longer function properly. [...]
Medical Center, LLP suffered a data breach after an unauthorized third party gained access to a portion of their computer network, potentially exposing protected health information of patients. The breach was detected on October 17, 2025, and the organization has since worked to secure their systems...
Daniel H. Cook Associates, Inc. experienced a network disruption on October 17, 2025, which led to a data security incident. The incident may have involved the unauthorized access and/or acquisition of certain files containing personal information. DHCA is offering affected individuals complimentary...
Research from Cisco Talos and Google Threat Intelligence Group underscores the extent to which North Korea-aligned attackers attempt to avoid detection.
The post North Korean operatives spotted using evasive techniques to steal data and cryptocurrency appeared first on CyberScoop.
Durvet, Inc. suffered a data breach between October 17, 2025, and October 18, 2025, resulting in unauthorized access to personal information, including names and Social Security numbers. The breach was discovered on October 17, 2025, and affected Maine residents. Durvet provided written notice of th...
A nation-state actor stole BIG-IP source code and information on undisclosed vulnerabilities from F5. We explain what sets this theft apart from others.
The post Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities appeared first on Unit 42.
The Dairy Farmers of America said cybercriminals breached company systems in June, gaining access to the information of employees and members of the cooperative.
Networking software company F5 disclosed a long-term breach of its systems this week. The fallout could be severe.
Under the new partnership, law enforcement agencies which use Flock Safety products can ask Ring owners to provide images for âevidence collection and investigative work,â according to a blog post on the Ring website.
Hackers exploit Cisco SNMP flaw CVE-2025-20352 in âZero Discoâ attacks to deploy Linux rootkits on outdated systems, researchers report. Trend Micro researchers disclosed details of a new campaign, tracked as Operation Zero Disco, that exploited a recently disclosed security flaw impacting Cisco IOS...
CVE and CVSS systems suffer from misaligned incentives and inconsistency Aram Hovespyan, co-founder and CEO of security biz Codific, says that the rating systems for identifying security vulnerabilities and assessing threat risk need to be overhauled.âŠ
Major international auction house Sotheby's is notifying individuals of a data breach incident on its systems where threat actors stole sensitive information, including financial details. [...]
Cybercriminals arenât just using AI â theyâre weaponizing it. Deepfakes, automated phishing, and AI-written malware are emerging as some of the fastest-growing threats on the enterprise radar. According to Foundryâs 2025 Security Priorities Study, AI-enabled attacks now rank a...
Hackers stole the personal information of over 17.6 million people after breaching the systems of financial services company Prosper. [...]
Should you have to think twice before posting a protest flyer to your Instagram story? Or feel pressure to delete that bald JD Vance meme that you shared? Now imagine that you could get kicked out of the countryâpotentially losing your job or educationâbased on the Trump administrationâs dislike of...
Viewpoint-based Online Surveillance of Permanent Residents and Visa Holders Violates First Amendment, Lawsuit ArguesNEW YORKâThe United Automobile Workers (UAW), Communications Workers of America (CWA), and American Federation of Teachers (AFT) filed a lawsuit today against the Departments of State...
The CISO job has outgrown its old definition. What started as a technical role has become a test of strategy, stamina, and leadership â and the scope keeps widening. According to Foundryâs 2025 Security Priorities Study, a majority of security leaders say their roles have expa...