> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Cloudflare is using its vast traffic to send responses faster than ever before, by learning the characteristics of each individual network and tuning our congestion control system.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-53609.
Le spécialiste en logiciels MPDV Mikrolab GmbH a été victime d'une attaque informatique, mais grâce à une intervention rapide, aucun dommage n'a été causé et les données des clients sont sécurisées. Les autorités ont été informées et les traces sécurisées ont été transmises pour une enquête plus app...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Bagnoles.
New expat packages are available for Slackware 15.0 and -current to fix a security issue.
Medical Computer Business Services (MCBS), une société de facturation médicale, a révélé une violation de son réseau survenue entre le 22 et le 26 septembre 2025. L'attaque, revendiquée le groupe de ransomware PEAR le 30 septembre, a exposé les informations sensibles de plus de 1,2 million de person...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the
We need your help to make a common-sense bill into California law. Despite the fact that California has one of the nation’s most comprehensive data privacy laws, it’s not always easy for people to exercise those privacy rights. A.B. 566 intends to make it easy by directing browsers to give all their...
In Part 1 of this series, we explored the fundamental risks and governance considerations. In this part, we examine practical strategies for adapting your enterprise risk management framework (ERMF) to harness generative AI’s power while maintaining robust controls. This part covers: Adapting your E...
According to BCG research, 84% of executives view responsible AI as a top management responsibility, yet only 25% of them have programs that fully address it. Responsible AI can be achieved through effective governance, and with the rapid adoption of generative AI, this governance has become a busin...
Un employé de Sophos a été victime de phishing, mais nous sommes parvenus à contrer la menace avec un processus de défense de bout en bout.
Hazel celebrates unseen effort in cybersecurity and shares some PII. Completely unrelated, but did you know “Back to the Future” turns 40 this year?
Navigating to your WordPress site only to be met with the White Screen of Death (WSoD) can be a daunting experience. This error denies access to your site for both administrators and visitors, disrupting your website’s performance and user experience. Despite its prevalence, this common WordPress pr...
Critical flaw ForcedLeak in Salesforce's AgentForce allows CRM data theft via prompt injection
The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild”
Cloudflare is making every feature available to any customer.
Vietnamese phishing campaign evolves from Python infostealer to PureRAT trojan
Cloudflare's developer platform keeps getting better, faster, and more powerful. Here's everything that's new.
We’ve teamed up with PlanetScale to make shipping full-stack applications on Cloudflare Workers even easier.
See what’s new in the redesigned Proton Mail app for iOS and Android. Enjoy offline mode and a smoother experience on both platforms.