> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several significant threats and trends. U.S. agencies, including CISA and the FBI, have issued warnings about attacks targeting industrial refrigeration controllers, emphasizing the need for improved security measures. Meanwhile, a data breach at Amplifon Americas has compromised the personal information of 1.3 million individuals, underscoring ongoing vulnerabilities in health data security. In the automotive sector, researchers exploited default credentials in mobile apps to gain unauthorized access to vehicles, raising concerns about IoT device security. Additionally, phishing attacks are on the rise, with Microsoft reporting 7.3 billion threats in Q3 2026. Finally, an exploited vulnerability in SonicWall's SSL-VPN could allow attackers to bypass multi-factor authentication, highlighting the critical need for timely patching and security awareness.
|
// AI-powered summary generated at 12:00
Dans un contexte de prolifération des menaces ciblant les téléphones mobiles, l’ANSSI préconise d’adopter 10 règles de bonnes pratiques pour l’utilisation de ces équipements.
With the proliferation of threats targeting mobile phones, ANSSI recommands adopting 10 best practice rules for using these devices.
Known Issues
Adding duplicate DHCP reservations in Web UI causes a loss of DHCP settings
Endpoint Security error status 0xc0000428 on Windows 11 endpoints with Microsoft KB5052093 when they run dism.exe or sfc.exe
WatchGuard Cloud managed access points detected as an Evil Twin false positive
Cannot...
A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages
A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users
We were informed this week that our digital book distributor (Sendowl) will be terminating our distribution plan on April 24th, 2025 and will be forcing migration into their new structure at that time. This new plan eliminates the option to send readers free PDF updates and applies a 6-fold overall...
Gray bots surge as generative AI scraper activity increases, impacting web applications with millions of requests daily
Hackers stole $1.67bn of cryptocurrencies in the first quarter of 2025, a 303% increase
The NCSC’s CEO, Richard Horne on the new cyber governance resources giving Boards the tools they need to govern cyber security risks.
Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion
Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025
Une cyberattaque par ransomware a frappé le bureau du défenseur public fédéral de l'Arizona, entraînant la perte d'accès aux fichiers de l'affaire de Ralph Menzies, condamné à mort. La défense a demandé et obtenu un délai pour déposer un mémoire sur la compétence mentale de Menzies, initialement pré...
The UK’s data protection regulator says it is overwhelmed with complaints from the public
PAC Strapping Products, Inc. experienced a ransomware incident that may have affected personal information, including names, credit/debit card numbers, and expiration dates. The company has taken measures to prevent a similar incident and is offering free credit monitoring services. The incident occ...
ESET Mail Security for Microsoft Exchange Server version 10.1.10018.0 has been released and is available for download.
WP Ultimate CSV Importer flaws expose 20,000 websites to attacks enabling attackers to achieve full site compromise
The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services”
Advice on the selection and deployment of Protective Domain Name Systems (DNS).
A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor
Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts