> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Cloudflare Radar now offers a Certificate Transparency dashboard for monitoring TLS certificate activity, and new regional traffic insights for a sub-national perspective on Internet trends.
It turns out we've all been using MCP wrong. Most agents today use MCP by exposing the "tools" directly to the LLM.
Cops make quick arrest after attack on airports, DPRK adversaries team up to weaponize developer identities, and PRC targets edge devices in US companies.
We reduced Cloudflare Workers cold starts by 10x by optimistically routing to servers with already-loaded Workers. Learn how we did it here.
On the Internet, being fast is what matters and at Cloudflare, we are committed to being the fastest network in the world.
An attack campaign has been identified which exploits vulnerabilities in Cisco Adaptive Security Appliance software
How to protect sensitive information about your setting and the children in your care from accidental damage and online criminals.
The effort, named Operation Contender 3.0, led to the arrest of 260 suspected cybercriminals
JLR said it is in a position to start clearing its backlog of payments for suppliers, while its parts logistics center is returning to full operations
You could be getting more than you bargained for when you download that cheat tool promising quick wins
Trend Micro highlighted the new LockBit version’s improved technical improvements and cross-platform functionality compared to previous iterations
Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from the angle of “where would be a good first pl...
Cloudflare is using its vast traffic to send responses faster than ever before, by learning the characteristics of each individual network and tuning our congestion control system.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-53609.
Le spécialiste en logiciels MPDV Mikrolab GmbH a été victime d'une attaque informatique, mais grâce à une intervention rapide, aucun dommage n'a été causé et les données des clients sont sécurisées. Les autorités ont été informées et les traces sécurisées ont été transmises pour une enquête plus app...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Bagnoles.
New expat packages are available for Slackware 15.0 and -current to fix a security issue.
Medical Computer Business Services (MCBS), une société de facturation médicale, a révélé une violation de son réseau survenue entre le 22 et le 26 septembre 2025. L'attaque, revendiquée le groupe de ransomware PEAR le 30 septembre, a exposé les informations sensibles de plus de 1,2 million de person...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the
We need your help to make a common-sense bill into California law. Despite the fact that California has one of the nation’s most comprehensive data privacy laws, it’s not always easy for people to exercise those privacy rights. A.B. 566 intends to make it easy by directing browsers to give all their...