> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware
Le Clusif commence son année 2025 en action en continuant à marquer notre engagement auprès de l’écosystème cyber. Le Clusif a ouvert l’année avec la 25e édition de son événement phare, le Panorama de la cybercriminalité, qui s’est déroulé le 23 janvier dernier au Campus Cyber. Ensemble, un panel d’...
I was trying to come up with a sensible title for this blog post, but I feel this one mirrors the thoughts and feelings of many of us about recent events in the PCI DSS compliance space! There have been some significant changes in recent weeks, and with just 18
Why established cyber security principles are still important when developing or implementing machine learning models.
Applying patches may be a basic security principle, but that doesn't mean it's always easy to do in practice.
Palo Alto Networks found that nearly two-thirds of UK organizations cited technology complexity as the most significant challenge towards building a sophisticated security posture
By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.
Why the NCSC decided to advise against this long-established security guideline.
VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously
Whilst not a password panacea, using 'three random words' is still better than enforcing arbitrary complexity requirements.
Chris Ensor highlights some important elements of the NCSC's new Technology Assurance strategy.
The UK’s information commissioner has warned that all digital firms using children’s data must follow the GDPR
Latest version of the CAF focusses on clarification and consistency between areas of the CAF.
Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors.
Security is a team sport. Whether you're a pentester, bug bounty hunter, student, or just love breaking (and fixing) things, our field thrives on shared knowledge, collaboration, and support. We want
The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...
Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.
Incident - Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
The post Inci...
ThinkCyber's CEO Tim Ward reflects on the challenges that startups face when developing innovative products.
Questions to ask your suppliers that will help you gain confidence in their cyber security.