> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Python RAT PylangGhost, linked to Famous Chollima, targeted crypto professionals via fake job sites
Doughnut maker Krispy Kreme has revealed that sensitive financial and personal data of over 160,000 individuals has been impacted following a November 2024 cyber incident
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2058.0 have been released and are available for download.
Banking giant UBS revealed it had suffered a data breach following a cyber-attack on procurement service provider Chain IQ
Cato Networks researchers demonstrated an attack leveraging Atlassian’s AI agent-enabling server
La chaîne de magasins de matériaux de construction Leymann-Baustoffe a été victime d'une attaque informatique, affectant également des filiales à Storkow, Beeskow, Eisenhüttenstadt et Francfort-sur-l'Oder. Les détails de l'attaque ne sont pas précisés dans l'article. L'entreprise est basée en Allema...
An alleged former member of the infamous Ryuk ransomware group has been extradited to the US
Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex
Le district scolaire de Bonneville a subi une attaque informatique, ce qui a entraîné la fermeture de son réseau pour des raisons de sécurité. Les programmes d'école d'été sont actuellement perturbés en raison de cette attaque. Aucune donnée n'a été compromise ou perdue lors de l'attaque, grâce à l'...
Une attaque cybernétique a touché le conseil municipal de Glasgow, provoquant des perturbations dans les services en ligne et potentiellement entraînant le vol de données client. Les autorités sont en train d'enquêter sur l'incident et les services affectés sont temporairement indisponibles. Les cit...
Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions
Un prestataire de l'agence régionale bruxelloise du stationnement a été victime d'une cyberattaque, et des données de ses usagers ont été volées. Les données subtilisées incluent le nom, prénom, adresse postale, adresse électronique, numéro d'immatriculation du véhicule, numéro de téléphone et numér...
CGP&H, LLC suffered a data breach where an unknown actor gained access to certain parts of its network between June 19, and June 20, 2025, and may have accessed or acquired certain files. The breach may have exposed name and Social Security number/Individual Taxpayer Identification Number. A cyberat...
Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025
Written by: Gabby Roncone, Wesley Shields
UPDATE (July 10)
In late June 2025, Google Threat Intelligence Group (GTIG) discovered continued UNC6293 operations that demonstrate an evolution in the group’s tradecraft. Using similar lure themes as previously observed activity, UNC6293 continued the ASP...
Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud
ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest
File parsers in Go contain unexpected behaviors that can lead to serious security vulnerabilities. This post examines how JSON, XML, and YAML parsers in Go handle edge cases in ways that have repeatedly resulted in high-impact security issues in production systems. We explore three real-world attack...
The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups
The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason