> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
ESET PSA plugin Service Release 2.3 is now available by logging in to the ESET PSA plugin portal.
Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware
Written by: Jaysn Rye
Executive Summary
As adversaries grow faster, stealthier, and more destructive, traditional recovery strategies are increasingly insufficient. Mandiant's M-Trends 2025 report reinforces this shift, highlighting that ransomware operators now routinely target not just production...
Vulnerability research company WatchTowr published a detection analysis for the Citrix Blled 2 flaw
Cybersecurity researchers have observed a 156% increase in credential theft incidents between 2024 and Q1 2025
Une entreprise a subi une attaque de hackers, mais grâce à son système de détection, elle a pu prendre des mesures pour limiter les dégâts et n'a pas subi d'impact significatif sur ses opérations financières et commerciales. L'entreprise va continuer à améliorer la sécurité de son réseau et de ses i...
Qantas said it is currently validating the contact, and has informed law enforcement
Check Point has discovered over 1000 suspicious domains registered in the run-up to Amazon Prime Day
La Biennale di Venezia a été victime d'une attaque informatique le 7 juillet 2025, les techniciens ont isolé les systèmes et les autorités ont été informées. Les opérations de ripristino ont permis la réactivation progressive des services. La Biennale fournira des informations aux personnes dont les...
Distributor Ingram Micro says it has found ransomware on its internal systems
EMPIRE Distribution Inc. suffered a cyber incident where an unknown third party accessed internal systems and data, potentially exposing names, Social Security numbers, and bank account numbers. The incident occurred on July 7, 2025. EMPIRE has taken steps to investigate, assess, and improve the sec...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
An unauthorized actor gained access to certain Peabody systems between June 13, 2025, and July 8, 2025, and copied certain data stored in those locations. The information included names and other data. A cyberattack was claimed by Interlock on July 18.
Prince George County Public Schools suffered a ransomware attack on or around July 6, 2025, which may have exposed employee and dependent personal information, including names, addresses, dates of birth, driver's license numbers, Social Security numbers, and benefits enrollment information. A cybera...
In my book Extreme Privacy, 5th Edition, I offer a script which will conduct a KnockKnock scan and parse the results for any potential malicious files running on your macOS machine. KnockKnock installs and executes fine with the commands in the book, but the script requires RipGrep in order to parse...
In my book OSINT Techniques, 11th Edition, I discuss the ability to use Google search operators to both isolate and eliminate specific data. This is more important than ever with the substantial increase of AI-generated content infiltrating our queries. We are testing some new techniques which pract...
Money Matters / Money Coach suffered a data security incident where an unauthorized outside party accessed and obtained a copy of data on a limited part of their server. The information accessed may have included name, home address, date of birth, social security numbers, and driver's license number...
Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks
Taiwan warned that popular Chinese-owned apps, including TikTok and Weibo, are harvesting personal data and sending it back to servers in China
Cracking the code of a successful cybersecurity career starts here. Hear from ESET's Robert Lipovsky as he reveals how to break into and thrive in this fast-paced field.