> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
A data security incident occurred at Huntington Hospitality Financial Services Corp, where personal information of certain individuals was potentially accessed without authorization. The incident was discovered on July 18, 2025, after a suspicious event was first learned of on December 12, 2024. The...
Australian Ransomware Attack, 12 December 2024: Medusa claims 852.4GB of data stolen from Ainsworth Game Technology. Include, confidential business information, employee data, including names, dates of birth, email addresses, bank account numbers, tax ID numbers and cards, passports.
The post Incide...
Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware
Fraudsters in UAE posed as Dubai Police, targeting citizens with fake fines via calls, emails and SMS
Ruby Central hired Trail of Bits to complete a security assessment and a competitive analysis of RubyGems.org, the official package management system for Ruby applications. With over 184+ billion downloads to date, RubyGems.org is critical infrastructure for the Ruby language ecosystem. This is a jo...
Krispy Kreme said the incident is likely to materially affect operations and short-term financial performance
The Korean Financial Security Institute (K-FSI) disrupted a fraudulent network that made $6.3m by stealing money from fake personal trading platforms
Author: Guus Beckers Back in 2022 Fox-IT decided to open source its proprietary incident response tooling known as Dissect. Since then it has been adopted by many different companies in their regular workflow. For those of you who are not yet familiar with Dissect, it is an incident response framewo...
Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk
Operation PowerOFF has dismantled a network of 27 DDoS platforms, leading to the arrests of three administrators and the identification of over 300 users
Author: Guus Beckers Back in 2022 Fox-IT decided to open source its proprietary incident response tooling known as Dissect. Since then it has been adopted by many different companies in their regular workflow. For those of you who are not yet familiar with Dissect, it is an incident response framewo...
The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware
Microsoft has patched dozens of vulnerabilities in December, including one zero-day being exploited in the wild
Author: Guus Beckers Back in 2022 Fox-IT decided to open source its proprietary incident response tooling known as Dissect. Since then it has been adopted by many different companies in their regular workflow. For those of you who are not yet familiar with Dissect, it is an incident response framewo...
A zero-day vulnerability in Cleo file transfer software is being exploited in data theft attacks
The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025
A cloud attack targeting Amazon SES, persistence, and a malicious AWS account ID.
La chaîne de supermarchés Avril a été victime d'une cyberattaque dans la nuit du 11 au 12 décembre, ce qui a entraîné des perturbations dans les opérations de ses magasins. Les employés doivent actuellement entrer les codes des produits à la main et certaines caisses sont fermées, mais les supermarc...
La société finlandaise Valio a été victime d'une cyberattaque qui a compromis les données personnelles de plus de 5 000 employés et membres du personnel, notamment des informations d'identité, des détails de salaire et des informations bancaires. L'attaque a été menée via les informations d'accès d'...
Posted by Greg Mucci, Product Manager, Artifact Analysis, Oliver Chang, Senior Staff Engineering, OSV, and Charl de Nysschen, Product Manager OSVDevOps teams dedicated to securing their supply chain and predicting potential risks consistently face novel threats. Fortunately, they can now improve the...