> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
ENCON Heating & Air Conditioning experienced a security incident resulting in unauthorized access to some of their computer systems. The breach occurred between February 21 and February 24, 2025, and affected HR files stored locally on their network. The company has not received any reports of perso...
Fake job ads target freelance developers, spreading malware via GitHub
A survey by IANS and Artico found significant regional variation in cybersecurity salary levels across North America
A North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims' crypto wallets and steals their login details from web browsers and password managers
Mobile phishing attacks surged in 2024, with 16% of all incidents occurring in the US, according to a new Zimperium report
Kela researchers 330 million compromised credentials to infostealer activity on over four million machines in 2024
ESET researchers analyzed a campaign delivering malware bundled with job interview challenges
Palo Alto Networks has observed exploit attempts chaining three vulnerabilities in its PAN-OS firewall appliances
CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware
Le *Cloud computing*, devenu incontournable pour les secteurs public et privé, favorise la transformation numérique mais offre également de nouvelles opportunités d’attaques et problématiques de sécurité pour les organisations qui l’utilisent. L'ANSSI observe une augmentation des attaques contre...
Le site web officiel du Haryana State Pollution Control Board (HSPCB) a été piraté jeudi soir et est toujours inaccessible. Les responsables du département ont porté plainte auprès de la cellule cyber de la police de l'État et ont pris des mesures pour sécuriser le site et prévenir de futures attaqu...
Le cabinet d'avocats sydneyen Brydens Lawyers a été victime d'une cyberattaque, entraînant une importante fuite de données. Le cabinet a signalé l'incident au Centre australien de cybersécurité et au Bureau du Commissaire à l'information australien, et a restauré la sécurité de son système informati...
Le *Cloud computing*, devenu incontournable pour les secteurs public et privé, favorise la transformation numérique mais offre également de nouvelles opportunités d’attaques et problématiques de sécurité pour les organisations qui l’utilisent. L'ANSSI observe une augmentation des attaques contre...
LGAA LLC suffered a data breach on February 20, 2025, where an unknown cyber actor accessed a limited portion of their computer network and may have copied files without permission. The breach involved the names and driver's license or state identification numbers and credit or debit card numbers of...
This is the third and penultimate post in a series about theoretical weaknesses in Fiat-Shamir as applied to proof systems. The first post is here, the second post is here, and you should probably read them. Over the past two posts I’ve given a bit of background on four subjects: (1) interactive pro...
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2049.0 have been released and are available for download.
A flaw in the Jupiter X Core plugin has been identified, allowing upload of malicious SVG files and remote code execution on vulnerable servers
Finastra notifies customers of data breach that took place more than three months ago, impacting sensitive financial information
A structured look at what data to collect for security purposes and when to collect it.
Australia-based Genea said it is investigating the cyber incident to determine whether any personal data was accessed by an unauthorized third party