> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
For large, complex firms struggling with the prescriptiveness of Cyber Essentials, ‘Pathways’ will provide a new route to certification.
Introducing a new set of NCSC principles to strengthen the resilience of organisations' cloud backups from ransomware attackers.
Incident - Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
The post Inci...
How to protect your backups that are stored in the public cloud.
You are likely aware of ASCII Smuggling via Unicode Tags. It is unique and fascinating because many LLMs inherently interpret these as instructions when delivered as hidden prompt injection, and LLMs can also emit them. Then, a few weeks ago, a post on Hacker News demonstrated how Variant Selectors...
La mairie de Murça a été victime d'une cyberattaque dans la nuit de jeudi, ce qui a bloqué l'accès à plusieurs plateformes et services numériques. Les procédures de sécurité internes ont été activées et les autorités compétentes ont été notifiées. La mairie travaille à résoudre les problèmes causés...
Le district scolaire de Pelham a été victime d'une cyberattaque cette semaine, ce qui a entraîné la mise hors ligne des ordinateurs et des lignes téléphoniques du district pour les deux prochaines semaines. L'attaque a coupé l'accès à internet, aux lignes téléphoniques et aux courriels, affectant ai...
ISACA London Chapter members demand e-voting system investigation over security and privacy concerns
Le comté de Union a détecté une attaque par ransomware sur son réseau informatique le 13 mars 2025, entraînant l'accès non autorisé et le vol de certaines données, principalement liées aux forces de l'ordre, aux affaires judiciaires et aux services du comté. Les informations compromises incluent pot...
Horizon Behavioral Health a subi une faille de sécurité informatique, une attaque de ransomware, entre le 13 et le 16 mars 2025, qui a pu donner accès à des informations personnelles de ses patients, notamment des informations démographiques et des données relatives aux assurances.
iOS 18.3.2 patches actively exploited WebKit flaw, addressing critical security risks for users
Whittaker & Company experienced a security incident involving unauthorized access to its computer network, resulting in the theft of personal information. The breach occurred between February 28, 2025, and March 13, 2025. The attack was claimed by Spacebears on March 20th.
Union County, Pennsylvania suffered a ransomware attack on March 13, 2025, which resulted in unauthorized access to personal information.
In a new round of cuts since Donald Trump became president, 100 people working with the US Cybersecurity and Infrastructure Agency saw their contracts terminated
Goosehead Insurance Agency, LLC suffered a data breach between March 6, 2025, and March 13, 2025, where an unauthorized actor accessed certain systems and downloaded files containing sensitive information. The attack was claimed by Chaos on March 31.
Trocaire College experienced a data security incident where certain files may have been acquired without authorization between March 12, 2025, and March 13, 2025. The investigation determined that some personal information was contained within the potentially affected data. An attack was claimed by...
Surging machine identities, faster threat detection and fewer vulnerabilities are shaping cloud security according to a new report
Our updated multi-factor authentication (MFA) guidance recommends organisations use techniques that give better protection against phishing attacks.
Refreshed guidance published to help practitioners manage cyber risk.
Lors de l’assemblée générale de Cybermalveillance.gouv.fr qui s’est tenue le 12 mars, Florence Puybareau, directrice du Clusif, a été désignée, pour le Clusif, membre titulaire du conseil d’administration. Elle y représente le collège des utilisateurs. Ce mandat, d’une durée de deux ans, est désorma...