> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Former Terraform CEO Do Hyeong Kwon is now in the US facing federal fraud charges
Two separate campaigns have been stealing credentials and browsing history for months.
Docomo has revealed a DDoS attack on Thursday took down key services
The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector
I regularly look at how the system prompts of chatbots change over time. Updates frequently highlight new features being added, design changes that occur and potential areas that might benefit from more security scrutiny.
A few months back I noticed an interesting update to the M365 Copilot (BizChat...
Apple has agreed to a $95m settlement in a class action lawsuit alleging Siri privacy violations, with eligible users receiving up to $20 per Siri-enabled device
The US government has sanctioned Russian state-affiliated entity CGE, which used a vast GenAI infrastructure to spread disinformation during the US Presidential election
La Police de Kingston, en Ontario, a été victime d'une cyberattaque qui a ralenti certains de ses services, mais elle assure que les appels urgents sont toujours traités rapidement. L'escouade de la cybercriminalité de la Police provinciale de l'Ontario participe à l'enquête. La police a mis en plac...
Sekoia’s innovative PlugX malware disinfection campaign removed active threats across ten countries
DoubleClickjacking bypasses X-Frame-Options and SameSite cookies in double-click sequences, exposing UI authentication flaws
Le fournisseur de soins de santé américain Community Health Center (CHC) a été victime d'une cyberattaque qui a compromis les données personnelles et de santé de plus de 1 million de patients. Les attaquants ont volé des fichiers contenant des informations sensibles, mais n'ont pas chiffré les systè...
The US government has set out proposals to increase security obligations on healthcare providers to protect patient data amid surging cyber-attacks in the sector
The State of Rhode Island has confirmed that cybercriminals have begun publishing data stolen from its social services portal, the RIBridges system
Dans le cadre de sa prochaine conférence, le Clusif invite les acteurs de la cybersécurité et du quantique à partager leurs expertises, perspectives et solutions innovantes autour des enjeux du chiffrement post-quantique. Contexte et enjeux L’actualité des derniers mois a fait la part belle aux déve...
Over 2.5 million end users are at risk as researchers discover 36 compromised Chrome extensions
Chinese hackers appear to have compromised Treasury machines via a trusted third party
Well, the writing has been on the wall for some years now, arguably over a decade, but the time has finally come where the largest CA in the World is going to drop support for the Online Certificate Status Protocol.What is OCSP?The Online Certificate Status Protocol is a
Insurance firm Markel Direct found that 69% of UK SMEs lack a cybersecurity policy, with a significant lack of basic cybersecurity measures in place across these firms
La branche indienne de l'agence de voyages Thomas Cook a fermé ses systèmes affectés après une cyberattaque qui a pris en charge son infrastructure IT. L'entreprise a lancé une enquête et travaille avec des experts en cybersécurité pour identifier l'ampleur de l'incident et prendre des mesures corre...
Le 30 décembre 2024 au matin, un employé de Pacific Rehabilitation Centers a reçu un message de rançongiciel sur son ordinateur. L’équipe informatique a immédiatement mis en place des mesures de sécurité et déconnecté les serveurs pour protéger les données. Une enquête est en cours : bien que les do...