> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
The NCSC's guidance for the risk management of high risk vendors in telecommunications networks.
A brief guide to MIKEY-SAKKE, a protocol that allows organisations to provide secure communications with end-to-end encryption.
The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024
How organisations can map their supply chain dependencies, so that risks in the supply chain can be better understood and managed.
Guidance outlining the risks of locally installed products interacting with cloud services, and suggestions to help organisations manage this risk.
Edesur Dominicana a confirmé avoir été victime d'une attaque cybernétique, mais a affirmé que ses informations n'ont pas été compromises. L'entreprise a mené une enquête approfondie avec le Centre national de ciberseguridad pour évaluer la véracité des allégations des attaquants. Edesur a réaffirmé...
Good practises for the management of public domain names owned by your organisation.
Why macros are a threat, and the approaches you can take to protect your systems.
La mairie de Palmeira a été victime d'une cyberattaque de type ransomware qui a rendu indisponible son service de messagerie institutionnel hébergé par GMAES TELECOM LTDA. L'entreprise responsable travaille à la récupération des services, mais la normalisation est retardée en raison de la complexité...
Guidance for enterprise administrators, small businesses and home users in relation to the recently published 'Krack' vulnerability in Wi-Fi networks protected by WPA2.
This guidance provides a primer on the essential techniques, technologies and uses of access management.
Urban One, un conglomérat médiatique basé aux États-Unis, a subi une attaque de ransomware qui a compromis des informations personnelles sensibles de centaines d'individus. L'incident, découvert en mars 2025, a impliqué un accès non autorisé au réseau de l'entreprise, entraînant l'exfiltration de do...
Check that you're talking to a genuine NCSC employee, and not a criminal.
Advice for those concerned a device has been infected.
Blind Eagle has been running campaigns targeting the Colombian government with malicious .url files and phishing attacks
How to make sure your organisation is prepared for home working.
Outlining the expectations for the minimum requirement for forensic visibility, to help network defenders secure organisational networks both before and after a compromise.
New York sues Allstate over data breach, alleging security failures that exposed the driver’s license numbers of nearly 200,000 individuals
Advice for organisations experiencing a ransomware attack and the partner organisations supporting them.
Advice to make it harder for cyber criminals to deliver malicious advertising, and reduce the risk of cyber-facilitated fraud.