> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Greenhouse Apartments experienced a data incident that may have affected personal information, with no evidence of misuse. The incident occurred between September 20, 2025, and September 21, 2025. Free credit monitoring services are being provided to affected individuals. A cyberattack was claimed b...
Hematology Oncology Consultants, une clinique médicale spécialisée en oncologie et maladies du sang, a subi une violation de données suite à une attaque par rançongiciel. Cette cyberattaque, dont la responsabilité a été revendiquée par le groupe Rhysida, a exposé des informations sensibles telles qu...
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".
Lautrec, Ltd. suffered a data breach on September 20, 2025, where certain files within their network were accessed and copied without authorization. The breach involved the exposure of personal information, including names and Social Security numbers. A cyberattack was claimed by Akira on October 7.
This update for Jetty, a Java servlet engine and web server, addresses a protocol-level vulnerability in HTTP/2 support also referred to as "MadeYouReset".
Amazon Web Service (AWS) recently announced that AWS Organizations now offers full AWS Identity and Access Management (IAM) policy language support for service control policies (SCPs). With this feature, you can use conditions, individual resource Amazon Resource Names (ARNs), and the NotAction elem...
Courts jail BreachForums operator, China’s TA415 ramps up phishing espionage, and Chaos Mesh flaws risk full Kubernetes cluster takeovers.
Amazon Web Services (AWS)Â is pleased to announce that the Summer 2025 System and Organization Controls (SOC) 1 report is now available. The report covers 183 services over the 12-month period from July 1, 2024 to June 30, 2025, giving customers a full year of assurance. The reports demonstrate our c...
This is the third installment in a blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
Imagine sharing information about reproductive health care on social media and receiving a message that your content has been removed for violatin...
ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations
Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing
Sophos classé N°1 dans 47 Rapports Globaux.
Notorious APT group Turla collaborates with Gamaredon, both FSB-associated groups, to compromise high‑profile targets in Ukraine
Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-10585 exists in the wild.
28-year-old Daniel Lee Newhard, an American citizen living in Estonia, has been charged in relation to the notorious hack of Vastaamo, the biggest data breach in Finnish history.
Read more in my article on the Hot for Security blog.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information. Google is aware that an exploit for CVE-2025-10585 exists in the wild.
We are dropping support for this feature in curl 8.17.0. Kerberos5 FTP to be exact. The last Kerberos support we had for FTP. Badness On September 16, 2025 we received a security report that accurately identified a possible stack based buffer overflow in the Kerberos FTP code that could allow a mali...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.