> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Cybercriminals impersonate the trusted e-signature brand and send fake Docusign notifications to trick people into giving away their personal or corporate data
Renovate is an OSS CLI/bot that updates your software dependencies automatically. It is usually integrated into the CI/CD process and runs on a schedule. It will create a Pull Request / Merge Request (PR/MR) to your repository with dependency updates. It can optionally auto-merge them. If you host i...
Written by: Diana Ion, Rommel Joven, Yash Gupta
Since November 2024, Mandiant Threat Defense has been investigating an UNC6032 campaign that weaponizes the interest around AI tools, in particular those tools which can be used to generate videos based on user prompts. UNC6032 utilizes fake “AI video...
Victoria’s Secret a signalé un incident de sécurité, ce qui a provoqué des perturbations sur son site web et ses commandes en ligne. L'entreprise a activé ses protocoles de réponse et a engagé des experts tiers pour résoudre le problème. Les magasins de Victoria’s Secret restent ouverts malgré l'inc...
Un hôpital aux États-Unis a subi une attaque informatique, ce qui a entraîné la fermeture temporaire de ses systèmes de données. L'hôpital a pris des mesures pour résoudre le problème et a encouragé les patients à maintenir leurs rendez-vous. Les enquêtes sont en cours pour déterminer les causes de...
Cisco Talos reported that a Chinese group has deployed web shells and malware in local government networks post-exploitation
Mediehuset Altaposten a été victime d'une attaque de ransomware, ce qui a affecté la publication de l'édition papier du journal et les émissions de Radio Alta. L'attaque a été signalée à la police et à l'autorité de contrôle des données. Les responsables de l'entreprise travaillent pour rétablir les...
Eastern Platinum Limited a détecté une faille de sécurité informatique le 27 mai 2025, qui a affecté ses systèmes internes, mais les opérations commerciales n'ont pas été interrompues. L'entreprise a pris des mesures pour contenir l'incident et travaille avec des experts pour enquêter et prendre des...
The US National Institute of Standards and Technology (NIST) published a white paper introducing a new metric called Likely Exploited Vulnerabilities (LEV)
Tungsten Automation (formerly Kofax) suffered a data breach, resulting in the exposure of personal information. Experian IdentityWorks is offering a complimentary two-year membership to affected individuals. The breach is believed to have occurred prior to November 28, 2025.
Murex Petroleum Corporation suffered a cybersecurity incident on May 27, 2025, where unauthorized access to their network may have resulted in the exposure of personal information. A cyberattack was claimed by Akira on June 30, 2025.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Telcom Insurance Group suffered a data breach, prompting the company to offer credit monitoring services to affected individuals. The breach led to the exposure of sensitive information, and the company is working to maintain protection of the affected data. The attack was claimed by Lynx on June 23...
Dunham CPA experienced a data breach where an unknown actor viewed and downloaded certain files between May 24, 2025, and May 26, 2025. The breach involved the viewing and downloading of files containing names and other breached elements. A cyberattack against Dunham CPA was claimed by Safepay on Ju...
Today we are going to discuss how real-world tactics, techniques, and procedures (TTPs) apply to computer-use systems, specifically, we’ll look at ClickFix attacks. This demo was part of my presentation at the SAGAI Workshop on May 15th, 2025 in San Francisco.
It was a great workshop, with tons of i...
Une attaque de ransomware a compromis les informations personnelles et de police d'au moins 146 souscripteurs de l'assureur Income Insurance à Singapour. L'attaque a visé DataPost, un fournisseur externe responsable de l'impression et de l'envoi de documents aux souscripteurs d'Income. Les investiga...
Les hôtels Arcona ont été victimes d'une attaque cybernétique, ce qui a entraîné des perturbations dans certains de leurs systèmes informatiques. Les hôtels concernés sont ceux de Rügen, Weimar et Rostock. L'entreprise a pris des mesures pour limiter les dégâts et a informé les autorités compétentes...
Posted by Craig Gidney, Quantum Research Scientist, and Sophie Schmieg, Senior Staff Cryptography Engineer Google Quantum AI's mission is to build best in class quantum computing for otherwise unsolvable problems. For decades the quantum and security communities have also known that large-scale quan...
The Salvation Army experienced a data security incident where an unauthorized third-party accessed their network environment, potentially exposing personal information such as names, social security numbers, and driver's license numbers. The incident occurred on or about May 24, 2025, and was claime...
Apro suffered a data breach where an unauthorized third-party accessed certain Apro systems from May 23, 2025 to May 24, 2025, obtaining certain files containing personal information. The breach was discovered on December 18, 2025. Apro is offering complimentary Experian IdentityWorks memberships to...