> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
O'Neill Wetsuits, L.L.C. a subi une faille de sécurité informatique entre le 23 et le 25 février 2025, entraînant l'accès non autorisé à certaines informations personnelles. L'entreprise a pris des mesures pour sécuriser ses systèmes et a engagé des experts en cybersécurité pour enquêter sur l'incid...
Genex Services, LLC experienced a data security incident due to a phishing attack that compromised the laptops of two employees, potentially affecting personal information. The incident was discovered on February 25, 2025. Genex is notifying all individuals whose information was potentially impacted...
Elementor plugin flaw puts 2m WordPress websites at risk, allowing XSS attacks via malicious scripts
All Star Recruiting Locums, LLC notified customers of a data breach that occurred on or around February 25, 2025, where an unauthorized third party may have accessed personal information. The attack was claimed under the RansomHub brand on March 21st, 2025.
An unauthorized party gained access to BCNYS internal systems from February 24, 2025, to February 25, 2025, potentially exposing personal information. The breach was discovered on August 4, 2025. BCNYS is offering complimentary credit monitoring to affected individuals.
Michigan man indicted for dark web credential fraud, purchased 2,500 logins from Genesis Market
Rogin Nassau LLC experienced a data security incident where some personal information may have been viewed or acquired without authorization. The incident occurred on February 25, 2025, and was discovered on August 21, 2025. The company is providing complimentary credit and identity monitoring servi...
Sprouse Shrader Smith PLLC experienced a data security incident where suspicious activity was detected on their network, potentially exposing personal information. An investigation found that documents containing personal information may have been copied from their network. The incident was discover...
Google Cloud's Key Management Service now features quantum-safe digital signatures to strengthen data integrity and prepare for emerging quantum computing challenges
Telstra found that 75% of cyber incidents impacting manufacturing firms originated from the targeting of IT systems connected to OT environments
The pioneering multi-media artist reveals the creative process behind her stage show called ARK, which challenges audiences to reflect on some of the most pressing issues of our times
Experts argue Britons are now less secure after their government effectively forced Apple to abandon end-to-end encryption
Following the largest-ever crypto theft, Bybit is offering researchers up to 10% of recovered funds
Key Takeaways Case Summary The intrusion started with the exploitation of CVE-2023-22527, a critical remote code execution vulnerability in Confluence, against a Windows server. The first indication of threat actor … Read More
Les collectivités territoriales gèrent de nombreux services selon leurs compétences, en matière administrative et régalienne, mais également sur de nombreux aspects de la vie sociale, territoriale et économique d’un territoire. Les conséquences d’attaques informatiques peuvent donc être majeures...
Une cyberattaque a mis hors ligne le registre australien des essais cliniques (ANZCTR) depuis le 28 février, empêchant les chercheurs de poursuivre leurs expériences. Les informations de contact et les mots de passe des utilisateurs ont été exposés, mais aucune donnée de santé n'a été compromise. Le...
Le centre médical Brunswick de Pointe-Claire a été victime d'une cyberattaque ciblant ses systèmes d'information, entraînant la fuite de données de patients. L'attaque a visé les systèmes d'information du centre médical, mais les détails sur la nature et l'ampleur de la fuite de données ne sont pas...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
BMS Holdings, LP suffered a data breach where an unauthorized actor gained access to their network between February 5 and February 24, 2025, and copied certain files. The breach may have impacted personal information, including names, addresses, and other sensitive data. BMS is offering credit monit...
Wear, Howell, Strickland, Quinn and Law, CPAs experienced a data breach after an unknown actor gained unauthorized access to their network between February 11 and 19, 2025. The breach may have involved personal information, including names and other data elements. The organization is offering compli...