> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
Le fabricant de outils de coupe TENRYU AMERICA, INC. a été victime d'une attaque de ransomware, ce qui a entraîné la cryptage de données sur son serveur. L'entreprise a isolé le serveur et travaille avec des experts en sécurité pour résoudre le problème. Aucune fuite de données de clients ou de part...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS ratin...
Healthy Living suffered a ransomware attack on 9/22/2025, potentially accessing files containing personally identifiable information. The organization has seen no evidence of misuse, but is notifying staff in an abundance of caution. Staff are advised to monitor their credit reports and account stat...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Abusing IAM Roles Anywhere to obtain persistent AWS access from outside the cloud.
Abusing the CodeBuild managed GitHub Actions runner integration to obtain long‑term access to an AWS environment.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Imagine jumping on board a class action after your precious datas have been breached, then sticking through it all the way until a settlement is reached. Then, finally, after a long and a...
In October 2021, the now defunct Arabic language Anime website Animeify suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 808k unique email addresses along with names, usernames, genders and plain text passwords.
United Group a subi une attaque cybernétique visant ses filiales Vivacom et Mainstream Bulgaria en Bulgarie, mais les mesures de confinement ont permis de limiter l'impact. Les services de base de Vivacom, tels que la connectivité mobile et fixe, restent opérationnels. L'entreprise a condamné ces ac...
R3 Government Solutions, LLC experienced a data security incident that may have impacted some of their employees' personal information. The incident occurred on September 21, 2025, and was claimed by Devman on September 29.
In an era when email remains one of the most important forms of communication for business, commerce, and personal use, ensuring that emails reach their intended recipients (and don’t end up in spam, or worse, aiding cybercrime) is more important than ever. One of the often “behind‐the‐scenes” organ...
Waterborne Environmental, Inc. suffered a ransomware attack on September 21, 2025, which may have exposed personal information of its customers, including names, dates of birth, addresses, driver's license numbers, Social Security numbers, passport numbers, and benefits information. An attack agains...
TriMed, Inc. suffered a cybersecurity incident between September 13, 2025, and September 21, 2025, which may have involved personal information of individuals who received surgically implanted hardware. The incident was detected on March 27, 2026. A cyberattack was claimed by Lynx on October 2.
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".
Boyd Gaming Corporation a subi une faille de sécurité informatique, une partie non autorisée a accédé à son système informatique interne, mais cela n'a pas eu d'impact sur les propriétés ou les opérations commerciales de l'entreprise. La société a pris des mesures pour répondre à l'incident et avert...
Le groupe immobilier KWG a été victime d'une attaque de hackers, ce qui a conduit à une tentative d'extorsion. Les enquêtes sont en cours et les conséquences pour les locataires sont encore incertaines. L'entreprise KWG est basée à Senftenberg en Allemagne.
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".