> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Strategic Retail Partners experienced unauthorized access to their network between February 3, 2025, and February 6, 2025, resulting in the access and/or copying of sensitive information. The affected information includes names, driver's licenses, Social Security numbers, and other personal data. Th...
ESET PROTECT On-Prem version 12.0.13.0 has been released and is available to download and update.
A new phishing attack by UAC-0006 has been discovered targeting PrivatBank with malicious files in password-protected archives to evade detection
Chainalysis found that ransomware payments fell significantly year-over-year despite a recorded increase in the number of ransomware events in 2024
This blog post highlights key points from our new white paper Preventing Account Takeovers on Centralized Cryptocurrency Exchanges, which documents ATO-related attack vectors and defenses tailored to CEXes. Imagine trying to log in to your centralized cryptocurrency exchange (CEX) account and your p...
Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing
The UK and its Five Eyes partners have launched new security guidance for edge device manufacturers and network defenders
Don’t wait for a costly breach to provide a painful reminder of the importance of timely software patching
Check Point has observed cybercriminals toy with Alibaba’s Qwen LLM to develop infostealers
Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks
Le groupe d'ingénierie IMI a été victime d'une cyberattaque, qui a touché plusieurs de ses sites à travers le monde, et a isolé certaines de ses systèmes pour enquêter et contenir l'incident. L'entreprise a informé ses employés et clients de l'incident, mais a refusé de divulguer les données qui ont...
Une cyberattaque a perturbé le système de dispatch de REMSA Health, mais les responsables ont affirmé que les soins aux patients n'ont pas été affectés. Les employés ont été invités à ne pas utiliser leurs ordinateurs en raison de la prudence, mais le système d'urgence 911 et les services de télépho...
Trigger warning: incredibly wonky theoretical cryptography post (written by a non-theorist)! Also, this will be in two parts. I plan to be back with some more thoughts on practical stuff, like cloud backup, in the near future. If you’ve read my blog over the years, you should understand that I have...
La société japonaise de télécommunications NTT Communications a subi une cyberattaque qui a compromis les informations de 18 000 clients entreprises, notamment des noms, des numéros de téléphone, des adresses e-mail et des informations de service. La brèche de sécurité a été découverte le 5 février...
Début février, l'entreprise de construction Nijhuis Bouw, basée à Rijssen, a été victime d'une cyberattaque et retenue en otage par des cybercriminels pendant cinq jours. L'entreprise a décidé de payer une rançon, tandis que les données de milliers de locataires de cinquante organismes de logement p...
ESET Mail Security for Microsoft Exchange Server version 11.1.10010.0 and ESET Security for Microsoft SharePoint Server version 11.1.15007.0 have been released and are available for download from the ESET website or upgrade from ESET PROTECT repositories.
Le 5 février 2025, la Charleston School of Law a découvert qu'un tiers non autorisé avait accédé à son réseau interne, compromettant potentiellement des fichiers contenant des informations personnelles. Après enquête, il a été confirmé que des données telles que les noms complets et potentiellement...
Riverdale Country School, Inc. experienced a sophisticated cyber-attack that may have accessed or taken certain information on February 6, 2025. The information that could have been subject to unauthorized access includes name and Social Security number. The cyberattack was claimed by Qilin on Febru...
DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks
Picus Security reports infostealer surge after revealing credentials appear in 29% of malware