> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
We are dropping support for this feature in curl 8.17.0. Kerberos5 FTP to be exact. The last Kerberos support we had for FTP. Badness On September 16, 2025 we received a security report that accurately identified a possible stack based buffer overflow in the Kerberos FTP code that could allow a mali...
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Well, one of them is, but what's important is that we now have a platform on which we can start pushing out a lot more. It's not that HIBP is a particularly complex system that needs expl...
Un attaque informatico contre Collins Aerospace, un fournisseur de services aeroportuels, cause des perturbations dans plusieurs aeroports europeens, notamment Heathrow, Berlino et Bruxelles. Les passagers sont invités à vérifier l'état de leur vol avec leur compagnie aérienne avant de se rendre à l...
Le réseau de Circle K (OK便利店) a été touché par une panne de réseau, ce qui a affecté les systèmes de paiement, les e-mails et les plans de récompense pour les membres, les magasins fonctionnent normalement mais ne acceptent que les paiements en espèces et par Octopus. L'entreprise enquête sur l'i...
Organizations are increasingly using large language models (LLMs) to provide new types of customer interactions through generative AI-powered chatbots, virtual assistants, and intelligent search capabilities. To enhance these interactions, organizations are using Retrieval-Augmented Generation (RAG)...
Le site web du gouvernement du comté de Catawba a été rétabli mardi après-midi après avoir été hors ligne pendant plusieurs jours. Le site web était soit hors ligne, soit en maintenance depuis vendredi. Une cyberattaque contre le gouvernement du comté a été revendiquée par Qilin le 14 octobre.
Dermatology Associates of Concord suffered a cyber-attack that resulted in unauthorized access to certain files within their network. The breach occurred between September 18, 2025, and September 19, 2025. An attack against Dermatology Associates was claimed by Anubis on November 6.
It's been a year full of challenges, but also important victories for digital freedoms. From EFF’s new lawsuit against OPM and DOGE, to launching Rayhunter (our new tool to detect cellular spying), to exposing the censorship of abortion-related content on social media, we’ve been busy! But we’re not...
Unauthorized access to Johnson, Webbert, & Beard, LLP's network occurred between September 15, 2025, and September 19, 2025, potentially exposing personal information. The incident was discovered on September 19, 2025, and an investigation was conducted. The organization is offering complimentary id...
The San Francisco Police Department is the latest California law enforcement agency to get caught sharing automated license plate reader (ALPR) data with out-of-state and federal agencies. EFF and the ACLU of Northern California are calling them out for this direct violation of California law, which...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, information disclosure or bypass of the same-origin policy.
One of the teenage suspects is accused of involvement in at least 120 attacks, resulting in $115m in ransom payments
La Commission de la protection des informations personnelles (PIPC) de Corée du Sud a reçu une seconde notification de violation de données de la part de l'opérateur KT, dans le cadre d'un incident lié à des micropaiements non autorisés.Le 18 septembre, KT a complété sa notification initiale du 11 s...
Note: This is a guest post by pentester and researcher, Tom Stacey (@t0xodile). You'd think that after almost 21 years since its initial public discovery, HTTP Request Smuggling would be barely exploi
A breach at the New York Blood Center resulted in theft of data for 194,000 people, including SSNs, IDs, bank and health information
One third of Android and over half iOS apps shown to be leaking insecure APIs and hardcoded secrets
Mutation testing reveals blind spots in test suites by systematically introducing bugs and checking if tests catch them. Blockchain developers should use mutation testing to measure the effectiveness of their test suites and find bugs that traditional testing can miss.
SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base
Insight Partners has released more details of a 2024 ransomware breach impacting thousands of individuals
How to choose an external attack surface management (EASM) tool that’s right for your organisation.