Adobe ColdFusion 2023.6 - Remote File Read
Get ready to take on Hacker Summer Camp with our guide on planning, prepping, and schedules for Datadog events.
FranceLink a été victime d'une attaque informatique, ce qui a entraîné la fermeture temporaire de son standard téléphonique et des perturbations dans ses services, notamment la perte de données. L'équipe de FranceLink travaille activement à la récupération des données et à la reconstruction de ses i...
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Ahtna, Inc. suffered a data breach between April 20, 2025, and June 1, 2025, resulting in unauthorized access to certain files containing personal information, including names and Social Security numbers. The breach was discovered on July 28, 2025. A cyberattack against Ahtna was claimed by Qilin on...
The Echo Design Group, Inc. suffered a data breach between July 25, 2025, and July 28, 2025, resulting in unauthorized access to human resources and accounting documents. The breach was discovered on July 28, 2025. A cyberattack against Echo was claimed by Akira on August 27.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
Hygrade Metal Moulding Manufacturing Corp. suffered a data breach, resulting in potential misuse of personal information. The company is offering complimentary credit monitoring and recommends placing a fraud alert or security freeze on credit files. A cyberattack was claimed by Sinobi on August 13.
Legend Senior Living, LLC suffered a data breach between July 27, 2025, and August 15, 2025, resulting in unauthorized access to certain systems and potential copying/viewing of files. The breach may have exposed personal information including names, Social Security numbers, driver's license numbers...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
MAS Law experienced a data breach between July 13, 2025, and July 28, 2025, where an unauthorized party accessed sensitive personal information. The breach was discovered on July 27, 2025, and affected certain individuals, including those who received this notification. The organization has taken st...
La ville de St. Paul a déclaré l'état d'urgence locale après une attaque informatique qui a touché ses réseaux Internet, forçant la ville à fermer ses services en ligne. L'enquête est en cours et il n'est pas encore clair qui est derrière l'attaque ou si des données sensibles ont été volées. La vill...
The US and partners from nine countries have taken down part of the ransomware group’s infrastructure
Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets
We successfully exploited two discontinued network devices at DistrictCon’s inaugural Junkyard competition in February, winning runner-up for Most Innovative Exploitation Technique. Our exploit chains demonstrate why end-of-life hardware poses persistent security risks.
Cisco Talos warned that the Chaos group, thought to be formed of former BlackSuit members, has launched a wave of attacks targeted a variety of sectors
The ToolShell bugs are being exploited by cybercriminals and APT groups alike, with the US on the receiving end of 13 percent of all attacks
Le bureau des impôts de Curaçao a subi une attaque de ransomware, ce qui a paralysé la plupart de ses opérations. Seule la section des véhicules a rouvert ses portes. Les autorités enquêtent toujours sur la nature et l'étendue de l'attaque.
Le groupe de télécommunications Orange a été victime d'une cyberattaque, entraînant des perturbations de services pour certains clients entreprises et services grand public en France. Les équipes d'Orange se sont mobilisées pour isoler les services concernés et limiter les impacts. Aucune donnée de...
A large-scale malware campaign known as SarangTrap has been observed using fake dating apps to steal personal data, targeting South Korean users