> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Oracle says hackers are trying to extort its customers Oracle said on Thursday that customers of its E-Business Suite of products “have received extortion emails,” confirming a warning first issued on Wednesday, opens new tab by Alphabet’s Google. In a blog post, opens new tab, the California-based...
Outsourcing your helpdesk always seems like a good idea – until someone else's breach becomes your problem Discord has confirmed customers' data was stolen – but says the culprit wasn't its own servers, just a compromised support vendor.…
No confirmed date but workers expected to return in the coming days Jaguar Land Rover is readying staff to resume manufacturing in the coming days, a company spokesperson confirmed to The Reg.…
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way.
Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals
For the latest discoveries in cyber research for the week of 6th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Red Hat has confirmed a cyber attack that resulted in unauthorized access to one of its GitLab instances. The attackers, Crimson Collective, claim to h...
Big Red rushes out patch for 9.8-rated flaw after crooks exploit it for data theft and extortion Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business Suite (EBS) that criminal crew Clop has already abused for data theft and extortion.…
Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption
Looks can be deceiving, so much so that the familiar icon could mask malware designed to steal your data and money.
Plus, PAN under attack, IT whistleblowers get a payout, and China kills online scammers Infosec in brief On August 29, the US Federal Emergency Management Agency fired its CISO, CIO, and 22 other staff for incompetence but insisted it wasn't in response to an online attack. New material suggests FE...
Exterro launches FTK Imager Pro with live decryption, iOS collection, and instant evidence preview—cutting acquisition from hours to minutes.
Renault and Dacia have become the latest big-name brands to suffer a supply chain breach
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This probably comes through pretty strongly in this week's video, but I love the vibe at CERN. It's a place so focused on the common good of science that all the other cultural attributes...
Découvrez comment vos réseaux, vos systèmes et vos employés résistent aux attaques simulées avant qu’un attaquant ne passe à l’action.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-49844.
La ville de Hohen Neuendorf a été victime d'une attaque cybernétique, ce qui a entraîné la fermeture de ses systèmes informatiques et a affecté les services publics, notamment l'émission de passeports et de cartes d'identité. Les experts en sécurité travaillent à la rétablissement des systèmes et le...
La produtora Estação I et le canal IEL TV ont été la cible d'une tentative d'attaque cibernétique, mais l'équipe technique a réussi à contrôler la situation avec l'aide de la police. Les systèmes ont été récupérés sans préjudice permanent et la programmation suit son cours normal. L'entreprise a réa...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Alliance Roofing Company, Inc. experienced a network disruption on October 6, 2025, which led to unauthorized access to their network and potential acquisition of personal data. The breach involved names, Social Security Numbers, and Driver License Numbers. A cyberattack was claimed by Akira on Apri...