> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Cybersecurity researchers are calling attention to a new campaign that delivers the Astaroth banking trojan that employs GitHub as a backbone for its operations to stay resilient in the face of infrastructure takedowns.
"Instead of relying solely on traditional command-and-control (C2) servers that...
Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts.
"Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileged...
Une vulnérabilité a été découverte dans Belden HiOS Switch Platform. Elle permet à un attaquant de provoquer un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Une vulnérabilité a été découverte dans Oracle E-Business Suite. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
On Oct. 13, 2025, Jetobra discovered a data breach compromising sensitive data belonging to an unknown number of individuals. An investigation determined that a cybercriminal gained access to the company's internal network between Sept. 16, 2025 and Sept. 17, 2025.
Designs For Vision, Inc. experienced a data breach between October 11, 2025, and October 13, 2025, resulting in unauthorized access to certain computer systems and the theft of files. The breach involved the theft of personal data, including names and other data elements. A cyberattack was claimed b...
Blue Teal Holdings, LLC experienced unauthorized access to certain systems, resulting in the potential exposure of protected personal information. The incident occurred through current or previous relationships with Blue Teal Holdings' affiliates, subsidiaries, and other entities. The company is off...
Euronics XXL à Brackenheim a été victime d'une cyberattaque en octobre 2025, lui faisant rater les ventes de fin d'année. Le magasin, propriété de Schüle Handels GmbH a engagé une procédure de redressement en avril 2026.
BreachForums saisi. Scattered Spider maintient la pression. ZATAZ éclaire l’angle intégrations SaaS et les opérations françaises liées au forum....
292 responsables IT/Cybersécurité révèlent les expériences vécues actuellement face aux ransomwares par les établissements de santé.
Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data.
The vulnerability, tracked as CVE-2025-61884, carries a CVSS score of 7.5, indicating high severity. It affects versions from 12....
When a website fails, your browser returns an HTTP status code that’s short, technical, and often cryptic. You’ve probably seen 404 Not Found or 500 Internal Server Error. Less common, but just as disruptive, is 501 Not Implemented. This guide explains what a 501 error actually means, how it present...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This week's video was recorded on Friday morning Aussie time, and as promised, hackers dumped data the following day. Listening back to parts of the video as I write this on a Sunday morn...
Omrin said to be experiencing a technical malfunction due to a ransomware attack, and working hard to find a solution. It cannot be reached by telephone, but can be contacted by email. Omrin will honor existing appointments (bulky waste) as much as possible.
Le groupe DLSI a subi une cyberattaque sur deux de ses filiales, PRESTIM et ML Intérim, mais a pu récupérer toutes ses données sans altération. Les autres sociétés du groupe n'ont pas été impactées. Un dépôt de plainte et une notification à la CNIL ont été effectués.
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments.
"Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that th...
MedImpact a récemment identifié un logiciel de rançon sur certains de ses systèmes, ce qui a entraîné une interruption de service. L'entreprise a pris des mesures pour contenir et atténuer l'incident, et elle travaille actuellement à la restauration des systèmes touchés. Les réclamations de pharmaci...