> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Cato Networks highlighted how the recently emerged HellCat ransomware group is using novel psychological tactics to court attention and pressurize victims
Cybercriminals exploit government websites using open redirects and phishing tactics, bypassing secure email gateway protections
Posted by the Agentic AI Security Team at Google DeepMindModern AI systems, like Gemini, are more capable than ever, helping retrieve data and perform actions on behalf of users. However, data from external sources present new security challenges if untrusted sources are available to execute instruc...
Government agencies and privacy watchdogs have started investigating the Chinese AI chatbot provider over data privacy concerns
ReliaQuest warns threat actor innovation and infostealer activity helped to accelerate breakout time by 22% in 2024
La société Flashforge, spécialisée dans les imprimantes 3D, a été victime d'une cyberattaque qui a compromis son service en ligne Flash Cloud, entraînant la perte de données utilisateur. Les détails de l'attaque et de l'étendue des dommages ne sont pas encore connus. Les utilisateurs de Flash Cloud...
The National Audit Office warns of major gaps in cyber resilience across UK government departments
La Commission du revenu interne de Papouasie-Nouvelle-Guinée (IRC) a été victime d'une importante cyberattaque, qui a mis hors ligne ses systèmes et pourrait avoir exposé des données sensibles appartenant à des centaines de milliers de personnes et d'entreprises. L'IRC n'a pas encore informé le publ...
La société italienne Fashion Box, connue sous le nom de Replay, a été victime d'une cyberattaque le 29 janvier 2025, lorsqu'un hacker a réussi à accéder à ses serveurs en utilisant une méthode d'attaque par force brute. L'attaque a permis au pirate de s'emparer de données confidentielles, notamment...
ESET Mail Security for Microsoft Exchange Server version 11.1.10009.0 and ESET Security for Microsoft SharePoint Server version 11.1.15003.0 have been released and are available for download from the ESET website or upgrade from ESET PROTECT repositories.
Une cyberattaque a touché le centre de chirurgie plastique Hand & Plastic Surgery Centre au Michigan, affectant près de 20 000 patients, avec des informations personnelles et de santé protégées exposées. Deux autres entreprises, Dove Healthcare au Wisconsin et Southeast Series of Lockton Companies e...
Unauthorized access to some of ACCC's systems occurred on January 29, 2025, resulting in the acquisition of personal information, including names and financial account numbers. The breach affected 94 Maine residents. ACCC has taken steps to enhance the security of its computer network.
Energy contractor ENGlobal reported that sensitive personal data was stolen by threat actors, with the incident disrupting operations for six weeks
Teamsters Local 175 suffered a data breach where an unauthorized third party may have accessed personal information, including names, Social Security numbers, and commercial driver's license information. The breach occurred due to unauthorized activity within the organization's computer systems. A c...
Group-IB researchers have exposed the highly organized affiliate platform and sophisticated operations of the Lynx Ransomware-as-a-Service group
Key derivation is essential in many cryptographic applications, including key exchange, key management, secure communications, and building robust cryptographic primitives. But it’s also easy to get wrong: although standard tools exist for different key derivation needs, our audits often uncover imp...
A Ponemon Institute survey highlighted the growing impact of ransomware attacks on victims’ revenue and reputation
An API supply-chain attack affecting a popular online travel booking service put millions of airline users at risk
Your organization’s application portfolio is growing and so are the risks. With every new web app, API, or microservice, attackers find new vulnerabilities to exploit. Meanwhile, your AppSec teams are
The number of data breach victims increased 312% annually to exceed 1.7 billion in 2024, according to the ITRC 2024 Annual Data Breach Report