> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Firefox 140.3.1 has been released, which fixes connection errors with some sites; if HTTP/3 connections failed, the fallback is now handled more gracefully.
Asahi Group Holdings, Ltd. a subi une attaque informatique qui a provoqué une panne de système, affectant ses opérations au Japon. Les opérations de commande et d'expédition ainsi que les centres d'appel ont été suspendus. L'entreprise enquête actuellement sur la cause et travaille à rétablir les op...
La ville d'Elne a été victime d'une cyberattaque menée par le groupe de hackers russophones Qilin Ransomware, qui exige une rançon sans avoir diffusé de données dérobées. Cette attaque s'inscrit dans une série d'offensives contre des cibles françaises, notamment les lycées de la région Hauts-de-Fran...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I'm so happy to finally be getting those HIBP demos out! The first couple are simple, but as I say in this week's vid, it's the simple questions we're still dealing with. As if to taunt m...
Le 28 septembre 2025, une activité potentiellement suspecte a été détectée sur une partie limitée du réseau informatique. Une enquête avec des spécialistes externes a été immédiatement lancée. Elle a révélé que certains fichiers avaient pu être consultés sans autorisation entre le 26 et le 28 septem...
Brevard Skin and Cancer Center a subi une attaque informatique en septembre 2025, qui a abouti à la fuite de données personnelles et de santé protégées de patients et d'employés. L'attaque a été revendiquée par le groupe de piratage Pear le 10 octobre. Le centre évalue actuellement ses mesures de cy...
Eugene Medvedev discovered that nncp, a package facilitating secure store-and-forward file and mail exchange, was susceptible to path traversal with the freq and file commands.
Le Comune de Forio a été victime d'une attaque informatique, entraînant la perte de documents et de données. L'Ente a décidé de prendre des mesures pour récupérer les données perdues et se protéger contre de futures attaques. Un service de support a été confié à la société ArtenSys pour analyser et...
Al-Babtain Power and Telecommunications Co. a annoncé que son équipe de cybersécurité a détecté une tentative de violation de la sécurité sur un serveur appartenant à l'une de ses filiales en Égypte, mais l'incident n'a eu aucun impact sur les données ou les opérations de l'entreprise. La société a...
CVE-2025-20333, CVE-2025-20362 and CVE-2025-20363 affect multiple Cisco products, and are being exploited by a threat actor linked to the ArcaneDoor campaign.
The post Threat Insights: Active Exploitation of Cisco ASA Zero Days appeared first on Unit 42.
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Ihrser.
Jimmy Kimmel has been in the news a lot recently, which means the ongoing lawsuit against him by perennial late-night punching bag/convicted fraudster/former congressman George Santos flew under the radar. But what happened in that case is an essential illustration of the limits of both copyright la...
Posted by Jann Horn, Google Project Zero
IntroductionSome time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from th...
This is the sixth installment in a blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
When we started our Stop Censoring Abortion campaign, we heard from activists, advocacy organizations, researchers, and even healthcare providers...
The enhanced AWS Security Hub (currently in public preview) prioritizes your critical security issues and helps you respond at scale to protect your environment. It detects critical issues by correlating and enriching signals into actionable insights, enabling streamlined response. You can use these...
We’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX.
We're announcing two enhancements to our Application Performance suite that'll show how the world sees your website, and make it faster with one click - available Cloudflare Dashboard!
The Singapore police said Facebook is the top platform for online scams in the country
We will cover some of the reasons why operators need to monitor the AS-SET memberships for their ASN, and now Cloudflare Radar can help.
Cloudflare will soon automatically create an AI-optimized search index for your domain, and expose a set of ready-to-use standard APIs and tools including an MCP server, LLMs.txt, and a search API.