> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
ESET PROTECT Hub v1.12.8 has been released.
This posted was drafted by EFF legal intern Alexandra Halbeck
The Court of Appeals for the Ninth Circuit, which covers California and most of the Western U.S., just delivered good news for digital privacy: abandoning a phone doesn’t abandon your Fourth Amendment rights in the phone’s contents. In Un...
It's easy to keep up with the fight for digital privacy and free expression. Our EFFector newsletter delivers bite-sized updates, stories, and actions you can take to stay informed and help out.
In this latest issue, we show how libraries and schools can safeguard their computers with Privacy Badger...
A guide to choosing the right EASM product for your organisation, and the security features you need to consider.
ESET PROTECT On-Prem 12.1, 12.0, 11.1 and 11.0 servicing update has been released.
This is the second instalment in a ten-part blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
During our Stop Censoring Abortion campaign, we set out to collect and spotlight the growing number of stories from people and organizati...
FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing
The Mexican government passed a package of outrageously privacy-invasive laws in July that gives both civil and military law enforcement forces access to troves of personal data and forces every individual to turn over biometric information regardless of any suspicion of crime. Â Â
The laws create a...
A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration
An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025
De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide
New IO research reveals a surge in AI attacks attempting to corrupt underlying training data
Chroma ATE a été victime d'une attaque de hackers, mais grâce à son équipe de sécurité et à la collaboration avec des professionnels, aucune information personnelle ou confidentielle n'a été divulguée. L'entreprise a activé ses mécanismes de défense et a renforcé la sécurité de son infrastructure. L...
A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned
Morrisroe Ltd a subi une attaque informatique, les données personnelles de ses employés, y compris les informations financières et bancaires, pourraient avoir été compromises. L'entreprise a pris des mesures pour contenir l'attaque et avertit ses employés de rester vigilants. L'attaque a été découve...
Unit 42 explores how innocent clicks can have serious repercussions. Learn how simply visiting a malicious site can expose users to significant digital dangers.
The post Myth Busting: Why "Innocent Clicks" Don't Exist in Cybersecurity appeared first on Unit 42.
The California legislature has passed a necessary piece of legislation, S.B. 524, which starts to regulate police reports written by generative AI. Now, it’s up to us to make sure Governor Newsom will sign the bill.Â
We must make our voices heard. These technologies obscure certain records and draft...
It was discovered that Node sha.js, an implementation of the SHA family hash functions in pure JavaScript, performed incomplete type checks. For the oldstable distribution (bookworm), this problem has been fixed
Fifteen ransomware groups have claimed shutdown on BreachForums; experts warn of rebrands and copycats