In June 2025, 107k unique customer email addresses were allegedly obtained from TheSqua.re, the "easiest way to find your next serviced apartment". The data also included names, phone numbers and cities which were subsequently posted to a popular hacking forum. TheSqua.re did not respond to repeated...
Le Centre de services scolaire des Appalaches a été victime d'une attaque par rançongiciel, les pirates revendiquant avoir obtenu 180 Go de données de l'organisation, dont des informations personnelles sur les élèves et les employés. L'organisation a repris le contrôle de ses serveurs et travaille a...
Saint Mary’s Home of Erie experienced a data breach where files and folders stored on certain databases may have been accessible to others outside of their organization between August 26, 2025, and August 28, 2025. A cyberattack was claimed by Worldleaks on October 3.
The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats
Kovack Financial, LLC experienced a data breach between August 8, 2025, and August 27, 2025, where an unknown actor gained access to files within their network. The breach was discovered on July 16, 2026. The incident may have impacted some of the company's information.
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2062.0 have been released and are available for download.
A new version of the Hook Android banking Trojan features 107 remote commands, including ransomware overlays
A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter
Written by: Austin Larsen, Matt Lin, Tyler McLellan, Omar ElAhdan
Update (August 28)
Based on new information identified by GTIG, the scope of this compromise is not exclusive to the Salesforce integration with Salesloft Drift and impacts other integrations. We now advise all Salesloft Drift custom...
On the day AWS Kiro was released, I couldn’t resist putting it through some of my Month of AI Bugs security tests for coding agents.
AWS Kiro was vulnerable to arbitrary command execution via indirect prompt injection. This means that a remote attacker, who controls data that Kiro processes, could h...
Key findings: Introduction Check Point Research (CPR) has been closely monitoring the activity of a highly persistent and sophisticated threat actor who leverages social engineering tactics to gain the trust of targeted U.S.-based organizations. While analyzing the phishing lures used by the actors,...
All previously scheduled mobility trips across Maryland for this week will be honored, said the state’s transportation administration
A new CIISec poll finds the majority of industry professionals would prefer more rigorous cybersecurity laws
Corrected Download and Article links in the Security Updates table. This is an informational change only.
Data I/O has revealed operational disruption following a ransomware breach that forced it to take some systems offline
Corrected Download and Article links in the Security Updates table. This is an informational change only.
Corrected Download and Article links in the Security Updates table. This is an informational change only.
In a previous blog post, we explored the technical side of passkeys (also known as discoverable credentials or resident keys), what they are, how they work, and why they’re a strong alternative to passwords. Today, we’ll show how passkeys are used in the real world - by everyday users and security p...
Les derniers articles scientifiques co-écrits par des agents issus des labos de l’ANSSI
anssiadm
mar 26/08/2025 - 07:00
Découvrez les parutions scientifiques les plus récentes auxquelles ont pris part différents agents de l’ANSSI issus des laboratoires de la division...
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1....