> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
South African Airways a subi une attaque informatique majeure qui a perturbé l'accès à ses plateformes en ligne. L'entreprise a réussi à restaurer ses systèmes en quelques heures et a lancé une enquête pour déterminer l'ampleur de l'incident. Les opérations de vol et les canaux de service client ont...
Des dizaines de milliers de données personnelles, y compris des IBAN, ont été volées lors d'une faille de sécurité chez Promosfera, une entreprise italienne qui gère des concours et des promotions pour des entreprises comme Panasonic. Les données ont été compromises entre le 2 et le 4 mai 2025. Les...
The Model Context Protocol (MCP) is a protocol definition for how LLM apps/agents can leverage external tools. I have been calling it Model Control Protocol at times, because due to prompt injection, MCP tool servers control the client basically.
This post will explain in detail why that is, and I w...
Le système scolaire du comté de Coweta a subi une attaque de cybersécurité sur son réseau informatique le vendredi soir. L'intrusion est prise au sérieux et fait l'objet d'une enquête. Les opérations scolaires se poursuivront normalement, mais certaines fonctions du réseau seront perturbées. Il n'ap...
Le 3 mai 2025, Tomoku Co., Ltd. a subi une attaque par ransomware ayant chiffré certains de ses serveurs, provoquant une panne de son système de commande en ligne. Malgré cette perturbation, les commandes via le web, le fax et l'e-mail, ainsi que le site web et les systèmes de messagerie de l'entrep...
From the power of collaborative defense to identity security and AI, catch up on the event's key themes and discussions
Fowler Elementary School District 45 suffered a ransomware attack on its network via internet social engineering, potentially exposing affected individuals' personal information. The incident occurred on or about May 3, 2025. A cyberattack against the school district was claimed by Interlock on the...
Cove Risk Services, LLC experienced a network disruption that led to unauthorized access or acquisition of certain information within their systems. The breach occurred on or around May 3, 2025, and was discovered on or around November 10, 2025. The affected information may have included first and l...
The US Cybersecurity and Infrastructure Security Agency has added two flaws affecting SonicWall products to its catalog of Known Exploited Vulnerabilities
NSC’s Alexei Bulazel said that failing to robustly respond to constant Chinese intrusions into critical infrastructure is in itself “escalatory”
Datasig generates compact, unique fingerprints for AI/ML datasets that let you compare training data with high accuracy—without needing access to the raw data itself.
This critical capability helps AIBOM (AI bill of materials) tools detect data-borne vulnerabilities that traditional security tools c...
A new privilege escalation technique in Google Cloud that leverages tag bindings to bypass IAM conditions and gain unauthorized access to sensitive resources.
FIDO Alliance found an uptick in awareness and takeup of passkeys as an alternative method to passwords
UK retailers including Harrods, M&S, and the Co-op are under a surge of cyber-attacks that may be linked by a common supplier or shared technological vulnerability
Une école de Middlesbrough a été visée par une attaque de cybersécurité, entraînant une faille de sécurité des informations de contact des parents. L'école a pris des mesures pour contenir l'incident et a lancé une enquête approfondie. Les autorités compétentes ont été informées de la faille de sécu...
Carney Badley Spellman, PS experienced a data security incident where personal information of certain individuals was potentially accessed without authorization. The incident occurred on May 19, 2025, after suspicious activity was first detected on May 2, 2025. The organization has offered complimen...
Anthropic has found its Claude chatbot is being used for automated political messaging, enabling AI-driven influence campaigns
Sandhills Medical Foundation, Inc. suffered a ransomware attack on May 8, 2025, resulting in unauthorized access to patient personal information. The incident may have involved social security numbers, driver licenses, dates of birth, government-issued identification, passports, and personal health...
Concerned about the fate of sensitive genetic information, the ICO and OPC have demanded that 23andMe prioritize customer data protection throughout its bankruptcy process