> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Incident - University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
The post Incident: Australian National Univers...
Nespresso Greece avertit ses clients d'une faille de sécurité potentielle suite à une attaque informatique en février 2025 contre son partenaire logistique, Orphee Beinoglou International Transportation. Les données compromises pourraient inclure les noms, numéros de téléphone, adresses, emails et n...
Goshen Medical Center suffered a data security incident where certain files may have been accessed or acquired without authorization. The incident involved personal health information, including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and medical record n...
Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts
AI is rapidly gaining traction in virtually every industry. But in AppSec, it's often met with a healthy skepticism, viewed by some as a useless gimmick at best or, at the other end of the scale, a ma
The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security
Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack
Introducing Medusa v1, a cutting-edge fuzzing framework designed to enhance smart contract security.
Une cyberattaque a frappé le Lake Washington Vascular, un fournisseur de soins vasculaires, exposant les données médicales de 21 000 patients et forçant la clinique à cesser ses opérations. Les informations compromises incluent les noms, adresses, historiques médicaux, résultats de tests diagnostiqu...
Veristat, a company, has reported a data event that occurred between February 12-14, 2025, where certain files on their systems were accessed or acquired without authorization. The investigation revealed that personal information, including names and Social Security numbers, was involved in the even...
US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development
Interpool, Inc. suffered a data breach on February 14, 2025, where an unknown cyberactor accessed a limited portion of their computer network and copied files without permission. The breach involved name and other types of personal information. Interpool, Inc. is notifying individuals and providing...
TVM Ventures has selected Trail of Bits as its preferred security partner to strengthen the TON developer ecosystem. Through this partnership, we’ll lead the development of DeFi protocol standards and provide comprehensive security services to contest-winning projects deploying on TON. TVM Ventures...
Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts
Our commitment to innovation At PortSwigger, we're always striving to push the boundaries of what's possible in application security, with a world-leading Research team dedicated to pioneering new hac
Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams
Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets
The virtual treasure chests and other casino-like rewards inside your children’s games may pose risks you shouldn’t play down
The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data
SecurityScorecard has uncovered a sophisticated campaign linked to North Korea’s Lazarus Group, distributing crypto-stealing malware