> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
99% of organizations report API-related security issues, highlighting risks from API growth
DISA Global Solutions confirms data breach affecting 3.3M people, exposing sensitive personal info
I first deployed my Pi-hole back in 2018 and ever since then, I've never looked back! Pi-hole have just dropped a pretty major update and, of course, I wanted to get HTTPS up and running on the Web UI like I had before. Pi-hole v6I won'
Meredith Whittaker, Signal's CEO, has threatened to pull the company out of Sweden if a proposed government bill requiring encryption backdoors becomes law
HaveIBeenPwned has added over 500 million new passwords and email addresses lifted via infostealers
Ransomware payments trending down, the cyber-resilience gap facing SMBs, and APT groups embracing generative AI – it's a wrap on another month filled with impactful security news
IVF clinic Genea has confirmed that stolen patient data has been published online, with the Termite ransomware group appearing to be the perpetrators
Europe is hit hard as geopolitics drives increase in state-backed APT and hacktivist activity
On February 26, 2025, Vitenas Cosmetic Surgery, PA detected an unauthorized attempt to infiltrate its computer network and launched a forensic investigation, which concluded on March 28, 2025. The investigation determined that some patient data—including names, dates of birth, Social Security number...
DermCare Management, une société de gestion de pratiques médicales basée en Floride, a subi une faille de sécurité qui a affecté plusieurs pratiques de dermatologie. Les informations personnelles et médicales de patients ont pu être compromises. L'enquête est toujours en cours pour déterminer l'éten...
Posted by Alex Rebert, Security Foundations, Ben Laurie, Research, Murali Vijayaraghavan, Research and Alex Richardson, SiliconFor decades, memory safety vulnerabilities have been at the center of various security incidents across the industry, eroding trust in technology and costing billions. Tradi...
61% of hackers use new exploit code within 48 hours, ransomware remains top threat in 2024
Ghostwriter cyber-attack targets Ukrainian, Belarusian opposition using weaponized Excel documents
In today’s rapidly evolving digital landscape, securing web applications at scale is a challenge, even for the most well-resourced organizations. Large enterprises operate thousands of applications an
Forescout observed the recently identified Chinese hacking group using medical imaging software applications to deliver malware
ReliaQuest claims 80% of ransomware attacks now focus solely on exfiltrating data as it is faster
In this blog, we’ll talk about one of our most popular, but rarely published report types and how adding threat modeling to your organization can save you from becoming the next billion-dollar headline.
SecurityScorecard revealed that the large-scale password spraying campaign can bypass MFA and security access policies by utilizing Non-interactive sign-ins
New Hiya data finds 26% of UK consumers encountered a deepfake scam call in Q4 2024
La ville de Fort St. John au Canada a été victime d'une cyberattaque qui a fortement impacté les services municipaux. Les équipes de la ville ont réagi rapidement en isolant les systèmes pour limiter l'activité non autorisée et une équipe d'intervention en cas de cyberincident a été activée pour éva...