> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
For the latest discoveries in cyber research for the week of 29th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Stellantis, Automotive maker giant which owns Citroën, FIAT, Jeep, Chrysler, and Peugeot, has suffered a data breach that resulted in exposure of No...
Your logins will live on after you pass on. Make sure they end up in the right hands.
Today we're announcing the open beta of a brand new and incredibly powerful feature on the Report URI platform, CSP Integrity! Having the ability to collect integrity metadata for scripts running on your site opens up a whole new realm of possibilities, and it couldn't be
Recruitment and retention remain a significant challenge for security teams, amid growing pressures on cyber professionals
The past 30 days have seen no shortage of new threats and incidents that brought into sharp relief the need for well-thought-out cyber-resilience plans
A team of researchers found that, by not encrypting the data broadcast by Tile tags, users could be vulnerable to having their location information exposed to malicious actors.
Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment
Department store Harrods has notified e-commerce customers of a major data breach
If you can’t see your entire operational technology environment, you can’t defend it. New guidance from the NCSC will help you gain that visibility.
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It's hard to explain the significance of CERN. It's the birthplace of the World Wide Web and the home of the largest machine ever built, the Large Hadron Collider. The bit that's hard to...
LG Balakrishnan & Bros Ltd a subi une attaque de malware, mais a assuré que ses systèmes sont sécurisés. L'entreprise a pris des mesures immédiates pour contenir l'impact et a notifié les autorités compétentes. Les opérations commerciales se poursuivent normalement.
Un incident de cybersécurité a touché le système informatique du gouvernement du comté de DeKalb. Les détails de l'incident ne sont pas précisés, mais il est actuellement en cours d'investigation. Le comté de DeKalb est situé dans l'Indiana, aux États-Unis.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Le groupe immobilier Engel & Völkers a été victime d'une attaque informatique à la fin septembre 2025, entraînant la fuite de données personnelles de clients. Les données compromises incluent des noms, des adresses, des coordonnées et des informations liées à des transactions immobilières. L'entrepr...
The breach notification does not explicitly state that a breach occurred, but rather provides information on security freezes and credit monitoring services. However, it is implied that a breach may have occurred, prompting the notification. A cyberattack was claimed by Akira on November 4, 2025.
Bypass AWS Network Firewall Egress Filtering using SNI spoofing and Host Header manipulation.
Le district scolaire indépendant de Llano, au Texas, a signalé un incident de cybersécurité suite à des pannes d'internet et de téléphone survenues le 29 septembre 2025. Le district a pris des mesures pour isoler les systèmes affectés et a fait appel à des spécialistes. Le groupe de ransomware Qilin...
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed Farbfeld, Wireless Bitmap, DICOM or Apple Icon images are opened.
Harry Jackson went into Kathmandu as a tourist. He ended up being one of the main international sources of news on Nepal’s Gen Z protests.
It was discovered that the symlink validation in node-tar-fs, a Node.js module that provides filesystem-like access to tar files, could be bypassed.