> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
In February 2025, Sophos completed the Secureworks deal and SolarWinds went private
Four in ten flaws exploited by threat actors in 2024 were from 2020 or earlier, with some dating back to the 1990s, according to a GreyNoise report
Big shifts in the infostealer scene, novel attack vector against iOS and Android, and a massive surge in investment scams on social media
A joint operation between the Thai and Singapore police has resulted in the arrest of a man allegedly responsible for over 90 data extortion attacks worldwide
NZ Incident - Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
The post NZ Incident: Kiwi car dealership Tristram Eu...
In this blog, we’ll talk about our threat modeling process, TRAIL, which stands for Threat and Risk Analysis Informed Lifecycle. TRAIL enables us to trace and document the impact of flawed trust assumptions and insecure design decisions throughout each client’s system architecture and SDLC. Over tim...
Le département de la Conservation du Missouri enquête sur une activité suspecte détectée sur l'un de ses serveurs de données. Une équipe de réponse d'urgence et une équipe de cybersécurité ont été mobilisées pour analyser les systèmes et les fichiers du département. Si des données individuelles sont...
Karen S. Pouliot CPA, P.A. experienced a data security incident where an unknown actor accessed and acquired personal information without authorization. The incident occurred on February 28, 2025, and the investigation concluded on July 22, 2025. The potentially affected information may have include...
DragonForce ransomware attacks Saudi firms stealing 6TB data, escalating cyber threats in real estate
LoveSac suffered a data breach between February 12, 2025, and March 3, 2025, where an unauthorized actor accessed certain systems and copied files containing name and Social Security number information. Although there is no evidence of identity theft or fraud, LoveSac is offering 24 months of compli...
Montgomery Little & Soran, PC experienced a data security incident that may have included personal information. An unknown actor potentially acquired certain files from their network. The attack was claimed by Weyhro on March 25th..
Winos 4.0 malware uses phishing emails to target organizations in Taiwan, Fortinet experts warn
Veracode found a 47% increase in the average time taken to patch software vulnerabilities, driven by growing reliance on third-party code
With AI's pattern recognition capabilities well-established, Mr. Schölkopf's talk shifts the focus to a pressing question: what will be the next great leap for AI?
In its 2025 Global Threat Report, CrowdStrike observed a significant escalation in Chinese cyber espionage activities
OpenSSF has released new baseline security best practices to improve open source software quality
La FinTech française Harvest, qui compte plus de 4600 sociétés clientes, a été victime d'une cyberattaque par ransomware le 27 février dernier, rendant son site web et ses services inaccessibles. L'entreprise n'a pas encore communiqué officiellement sur l'incident, mais les données établies sont ind...
FBI confirms North Korea’s Lazarus Group responsible for Bybit crypto heist
La ville d'Orangeville a été victime d'une cyberattaque et a pris des mesures immédiates pour protéger les informations et limiter les risques. Les experts en cybersécurité et les autorités locales collaborent pour comprendre l'ampleur de l'incident. La ville s'engage à maintenir la transparence et...
Scott & Kraus, LLC experienced an IT outage on February 27, 2025, which led to unauthorized access to their network and potential data breach. The breach may have involved personal information, including names and other details. A cyberattack against Scott & Kraus was claimed by Kraken on June 28.