> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
Le groupe de soins de santé Sunflower Medical Group au Kansas a été victime d'une cyberattaque en décembre, exposant les informations sensibles de plus de 220 000 patients, notamment des numéros de sécurité sociale, des informations médicales et des données d'assurance santé. Les hackers ont accédé...
Lors d’une conférence sur la cybersécurité organisée par Johnson Financial Group, Ryan Irish, responsable informatique de TG3 Electronics, a partagé son expérience d’une cyberattaque survenue en décembre. L’entreprise a été paralysée par une attaque par ransomware, mais grâce à des sauvegardes hors...
The US Government is offering a $5 million reward for information leading to the disruption of financial mechanisms supporting North Korea following a six-year conspiracy
Wong Fleming P.C. suffered a data breach where an unauthorized actor accessed their computer network and potentially copied certain files between December 13, 2024, and December 14, 2024. The breach may have involved the copying of sensitive information, including names and other personal details. T...
Sophos found observed a significant rise in Microsoft LOLbins abused by attackers in H1 2024 compared to 2023
Claims on ransomware groups’ data leak sites reached an all-time high in November, with 632 reported victims, according to Corvus Insurance
Discover how to identify and exploit misconfigured AWS IAM roles using Terraform Cloud OIDC
IOCONTROL, a custom-built IoT/OT malware, was used by Iran-affiliated groups to attack Israel- and US-based OT/IoT devices, according to Claroty
ISC2 research has found that cybersecurity leaders have limited skills and training in areas like communication, strategic mindset and business acumen
Australian Retail DDoS Attack, 13 December 2024: New South Wales: Bondi Markets was allegedly taken down in a DDoS attack, making the organisation the latest victim of a wider RipperSec threat group DDoS campaign against Australian companies.
The post Incident: Bondi Markets the latest claimed victi...
Almost three quarters of UK consumers believe bad bots are ruining Christmas by buying up popular gifts, forcing many to purchase expensive alternatives, according to Imperva research
This post describes an in-depth investigation by Datadog security researchers into a threat actor dubbed MUT-1244, which targets other malicious actors as well as security practitioners and academics.
VectraRx Mail Pharmacy Services LLC a signalé une violation de données à la suite d'une cyberattaque en décembre 2024, qui a permis à un tiers non autorisé d'accéder à des informations sensibles de clients, notamment des numéros de sécurité sociale, des dates de naissance et des informations de pres...
Two Woffice theme vulnerabilities have been identified that allow attackers to gain unauthorized access and control of unpatched websites
Cyber-attacks involving Remcos RAT surged in Q3 2024, enabling attackers to control victim machines remotely, steal data and carry out espionage
Le Taylor Regional Hospital à Hawkinsville, en Géorgie, a été victime d'une cyberattaque par ransomware, mais les responsables ont réussi à isoler le problème et à maintenir les activités hospitalières. L'enquête préliminaire n'a pas trouvé de preuve que des données aient été compromises, mais l'hôp...
Russian-made spyware BoneSpy and PlainGnome target former Soviet states, while public security bureaus in mainland China use Chinese surveillance tool EagleMsgSpy
An insurance employee has been handed a suspended sentence after illegally accessing personal information
Une faille de sécurité chez Nth Degree Investment Group a entraîné une violation de données, potentiellement exposant des informations personnelles telles que des numéros de sécurité sociale, des dossiers médicaux et des informations financières. Les avocats enquêtent sur cette affaire pour détermin...
HP Wolf reveals that 79% of IT security decision makers are lacking in crucial hardware and firmware expertise