> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
PeopleGuru suffered a data breach in which an unauthorized third party gained access to certain systems within its network, potentially exposing sensitive information including names, Social Security numbers, financial account information, and driver's license numbers.
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team
Android recently announced Advanced Protection, which extends Google’s Advanced Protection Program to a device-level security setting for Android users that need heightened security—such as journalists, elected officia...
ESET Direct Endpoint Management plugin for N-able N-sight RMM Service Release 2.0 has been released.
Researchers from Koi Security have detected 18 malicious Chrome and Edge extensions masquerading as benign productivity and entertainment tools
Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting
Le Clusif organise une conférence le 23 octobre prochain en présentiel au Campus Cyber sur le thème des dépendances stratégiques et de leurs répercussions sur le paysage de la cybersécurité. Les dispositifs de sécurité des organisations reposent sur une collaboration étroite avec de multiples acteur...
Deptective, our new open-source tool, automatically finds the packages needed to install software dependencies. It does so not based on the software’s self-reported requirements, but by observing what the software needs at runtime.
Sonatype’s latest Open Source Malware Index report has identified more than 16,000 malicious open source packages, representing a 188% annual increase
The company behind AV/EDR evasion tool Shellter has confirmed the product is being used by threat actors
Las Vegas. August. Protocols are getting torn apart. This summer, PortSwigger returns to Black Hat USA and DEF CON 33 with a host of new talks, events and ways to meet PortSwigger and the the teams be
China’s Hikvision vows legal battle after Canada bans its operations, citing national security concerns
Trend Micro has observed the Bert ransomware group in operation since April 2025, with confirmed victims in sectors including healthcare, technology and event services
In 2024 we looked at the possibility of leveraging open weights LLMs for source code analysis. The answer was clearly negative, as a small code base could easily take 200K tokens, more than any context window offered by open weights models. The table below summarizes the top LLMs by context window a...
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.Fortinet has observed this to be exploited in the wild on F...
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager and FortiAnalyzer may allow an authenticated attacker with high privilege to extract database information via crafted requests. Revised on 2025-07-09 00:00:00
Le groupe hospitalier Ameos a été victime d'une attaque informatique, ce qui a entraîné la fermeture de ses systèmes numériques. Les hôpitaux de Mecklenburg-Vorpommern ont été touchés, avec des perturbations du trafic électronique et des services numériques. Les systèmes sont désormais de nouveau en...
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS cw_stad daemon may allow an authenticated attacker to execute arbitrary code or commands via specifically crafted requests. Revised on 2025-11-03 00:00:00
La ville de York a subi une cyberattaque l'été dernier, ce qui a entraîné une interruption de ses systèmes informatiques et a nécessité un paiement de rançon de 500 000 dollars. L'attaque a commencé le 8 juillet et a pris le contrôle de l'infrastructure informatique de la ville. Le montant payé repr...
La Perouse, LLC suffered a data breach due to unauthorized access to one of their third-party billing platforms, resulting in the potential exposure of patient billing information. The breach occurred in July 2025, and the company became aware of it on July 8, 2025. A cyberattack was claimed by Ever...
Important changes to Android devices took effect starting Monday.