> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access codes
A widespread RFQ scam exploited net payment terms to fraudulently obtain high-value devices
Behind every free online service, there's a price being paid. Learn why your digital footprint is so valuable, and when you might actually be the product.
Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the SharePoint vulnerabilities
The UK government said a public consultation showed widespread support on a payment ban for public sector and CNI organizations
Updated acknowledgment. This is an informational change only.
Despite being a rebrand of several ransomware families, GLOBAL GROUP innovated with the use of an AI chatbot in the negotiation process
ASIC said the financial services firm’s failings led to a data breach impacting nearly 10,000 clients
Updated the build numbers. This is an informational update only.
Abnormal AI found that 96% of security leaders have no plans to reduce the headcount in SOC teams as a result of AI adoption, instead focusing on reallocating roles
La Südwestdeutsche Medienholding a été victime d'une attaque de pirates informatiques, des tiers non autorisés ont pu accéder à son réseau, la société a déclaré un incident de sécurité informatique critique et est en contact étroit avec les autorités de sécurité.
Gap International, Inc. experienced a network disruption on July 22, 2025, which led to unauthorized access to certain files containing personal information. The affected data included names, Social Security numbers, driver's license or state ID numbers, medical information, and health insurance inf...
Posted by Matthew Suozzo, Google Open Source Security Team (GOSST)Today we're excited to announce OSS Rebuild, a new project to strengthen trust in open source package ecosystems by reproducing upstream artifacts. As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives...
HealthcareInteractive, Inc. suffered a security incident where an unauthorized actor copied certain files from their computer network between July 8, 2025, and July 12, 2025. The incident was discovered on or about July 22, 2025. The company is offering complimentary access to credit monitoring serv...
Nova Biomedical Corp. experienced a sophisticated cybersecurity attack on July 22, 2025, which may have impacted personally identifiable information. The company is offering complimentary access to Experian IdentityWorks for 24 months to help protect affected individuals. Nova is also providing info...
New samples of DCHSpy, a spyware implant linked to Iranian APT group MuddyWater, were detected by Lookout one week after the start of the Israel-Iran conflict
Bellflower Unified School District suffered a data breach where an unauthorized third party may have accessed personal information, including names and other breached elements, due to unauthorized activity within its computer systems. The incident was discovered on April 15, 2026, and the district h...
An investigation has revealed novel scams using tools like MaisonReceipts, creating realistic fake receipts to resell stolen or counterfeit good
An attack on a US accounting firm delivered PureRAT via Ghost Crypt, involving social engineering and advanced obfuscation techniques