> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Threat actors are abusing Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in connection with ransomware attacks likely orchestrated by Storm-2603 (aka CL-CRI-1040 or Gold Salem), which is known for deploying the Warlock and LockBit ransomware.
The threat actor's use...
Les hackers nord-coréens ont volé plus de 2 milliards en cryptoactifs en 2025....
Plus: US government cybersecurity staffers get reassigned to do immigration work, a hack exposes sensitive age-verification data of Discord users, and more.
Microsoft, Zataz et le FBI alertent : les services RH deviennent la cible privilégiée des cybercriminels détournant les salaires....
In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.3M unique customer email addresses exposed following a breach of it...
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed. For the oldstable distribution (bookworm), these problems have been fixed
Kearney Public Schools a été victime d'une attaque de cybersécurité qui a compromis son réseau technologique, les écoles resteront ouvertes mais les téléphones et les emails ne seront pas opérationnels jusqu'à la restauration du réseau. Les systÚmes basés sur le cloud, y compris les informations sur...
Le groupe Mino, un fabricant de machines au Japon, a été victime d'une cyberattaque par rançongiciel. L'incident a été découvert en octobre 2025, lorsque des employés ont trouvé des documents de menace sur les serveurs internes. Les données de production, les informations financiÚres et les manuels...
I like testing publication strategies. I started self-publishing my own books in 2011 after having bad experiences with traditional publishers. This worked out amazingly well for about a decade. Over the last few years, book piracy eliminated many of the sales, and we have retreated from further new...
Online surveillance is everywhereâand understanding how youâre being tracked, and how to fight back, is more important than ever. Thatâs why EFF partnered with Women In Security and Privacy (WISP) for our annual Global Membersâ Speakeasy, where we tackled online behavioral tracking and the massive d...
Video.
As usual, you can also use this squid post to talk about the security stories in the news that I havenât covered.
Blog moderation policy.
Scattered Lapsus$ Hunters: Organizations, be aware of the effort of this cybercriminal alliance as they target retail and hospitality for extortion.
The post The Golden Scale: Bling Libra and the Evolving Extortion Economy appeared first on Unit 42.
Austin, Texas is a major tech hub with a population thatâs engaged in advocacy and paying attention. Since 1991, EFF-Austin an independent nonprofit civil liberties organization, has been the proverbial beacon alerting those in central Texas to the possibilities and implications of modern technology...
Law enforcement agencies in the United States and France have seized control of domains linked to the notorious BreachForums hacking forum, commonly used for the leaking of stolen data, and the sale of hacked credentials.
Read more in my article on the Hot for Security blog.
What developers using artificial intelligence (AI) assistants and vibe coding need to protect against.
News of the reassignments comes at a time when the U.S. is facing a wave of hacks targeting private industry and the federal government.
Counter Threat Unitâą (CTU) researchers are investigating multiple incidents in an ongoing campaign targeting users of the WhatsApp messaging platform. The campaign, which started on September 29, 2025, is focused on Brazil and seeks to trick users into executing a malicious file attached to a self-s...
The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected devices at U.S. pro...
The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn Widely known time-related software bugs that could cause significant disruptions when triggered in more than a decade are actually exploitable by hackers today, researchers warn. One of the bugs, known as âThe Year 2038 pro...
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken âcontrolling ownershipâ of the surveillance tech maker.