> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
CISA has launched a new tool to streamline cyber incident response and aid in adversary eviction
Semperis found that executives were physically threatened in 40% of ransomware incidents, in a bid to pressure victims to pay demands
We’re releasing pajaMAS: a curated set of MAS hijacking demos that illustrate important principles of MAS security.
The arrest of members of the Scattered Spider cyber-attack group have temporarily halted new intrusions, however, similar threat actors continue to pose risks
Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware
Here's a look at cybersecurity stories that moved the needle, raised the alarm, or offered vital lessons in July 2025
Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities
North Korea’s Lazarus Group has been blamed for a cyber-espionage campaign using open source packages
Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise Server 2016. This is an informational change only.
Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise Server 2016. This is an informational change only.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-50388.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-50387.
Le Muséum national d'Histoire naturelle a été victime d'une cyberattaque, ce qui affecte la recherche française. Le musée est également un centre de recherche important. L'attaque a eu lieu récemment, mais la date exacte n'est pas précisée.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.
La ville de Bar Harbor a subi une attaque de cybersécurité, ce qui a entraîné la fermeture de ses services en ligne pour un avenir prévisible. Les systèmes de la ville ont été déconnectés pour prévenir tout dommage supplémentaire et une enquête est en cours avec l'aide de la société de cybersécurité...
Phoenix Products, LLC suffered a sophisticated ransomware attack on July 31, 2025, which may have involved unauthorized access to employee data, including first and last names and Social Security numbers. The attack was claimed bay Play on August 4.
A SentinelLabs report has revealed patents linked to firms aiding China's cyber-espionage operations, exposing new capabilities
L'Ocean Edge Resort & Golf Club a subi une violation de données suite à une attaque par rançongiciel menée par le groupe Nitrogen. Cette violation a exposé une large gamme d'informations sensibles des consommateurs, incluant des numéros d'identification gouvernementaux, des dossiers de santé, des nu...
A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques