> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
Over 1 million domains are vulnerable to âSitting Ducksâ attack, which exploits DNS misconfigurations
Misconfigurations in Microsoft Power Pages granting excessive access permissions expose sensitive data, risking PII to unauthorized users
For the past year, weâve worked with the Python Package Index (PyPI) on a new security feature for the Python ecosystem: index-hosted digital attestations, as specified in PEP 740. These attestations improve on traditional PGP signatures (which have been disabled on PyPI) by providing key usability,...
The FBI and CISA have confirmed that US officialsâ private communications have been compromised
Over 80% of UK organizations suffered an API security incident in the past year, with each costing over ÂŁ400,000
La sociĂ©tĂ© allemande Vossko, spĂ©cialisĂ©e dans la transformation de produits alimentaires, a Ă©tĂ© victime d'une cyberattaque par ransomware le 14 novembre, qui a cryptĂ© ses systĂšmes internes et bases de donnĂ©es. Les systĂšmes ont Ă©tĂ© restaurĂ©s et la production a repris, mais l'enquĂȘte est toujours en c...
The UKâs financial regulators have discarded plans to force critical suppliers to disclose new vulnerabilities
On November 14, 2024, Westfield Fire District detected unauthorized access to its network during an IT outage, resulting in acquisition of certain files containing membersâ personal information. By April 17, 2025, the district confirmed that personal data may have been compromised and notified affec...
On October 31, 2024 an unknown third party gained unauthorized access to the City of McKinneyâs network environment, which was discovered and contained on November 14, 2024. A forensic investigation completed on December 30, 2024 determined that certain files containing personal information may have...
Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic
2025 could see our biggest AI fears materialize, according to a Google Cloud forecast report
In January, we identified and reported a vulnerability in the Lotus and Venus clients of the Filecoin network that allowed an attacker to remotely crash a node and trigger a denial of service. This issue is caused by an incorrect validation of an index, resulting in an index out-of-range panic. The...
Lazarus APT has been found smuggling malware onto macOS devices using custom extended attributes, evading detection
An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious
Le département de la Réunion a été victime d'une cyberattaque le 13 novembre, mais grùce à l'intervention rapide des équipes informatiques, la fuite de données a été limitée. Les réseaux informatiques ont été temporairement interrompus pour éviter tout risque de propagation, et une cellule de crise...
Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited
La ville d'Aschaffenburg en BaviÚre a été victime d'une cyberattaque qui a entraßné la mise hors ligne de son systÚme d'information pour éviter de nouveaux dommages. Les citoyens ne peuvent plus contacter la ville par e-mail ou par téléphone, et le Rathaus est fermé car les employés ne peuvent plus...
Le CĂ©gep de Sorel-Tracy, ainsi que son campus de Varennes, ont Ă©tĂ© visĂ©s par une cyberattaque. En rĂ©ponse, le Service des technologies de lâinformation, en collaboration avec une firme experte, a pris des mesures immĂ©diates et mĂšne une investigation approfondie. Les systĂšmes informatiques de lâĂ©tabl...
Australian Transport Ransomware Attack, 13 November 2024: Ransomware gang Akira claims breach of Queensland-based transport company Followmont Transport. Akira "We will upload 230Gb of data including NDAs, passports, lot,âs of driver licenses, medical documents, detailed financial information.
The p...
Une enquĂȘte est en cours aprĂšs que la sociĂ©tĂ© Alberta Innovates a Ă©tĂ© victime d'une cyberattaque. Les dĂ©tails de l'incident ne sont pas encore disponibles, mais l'enquĂȘte vise Ă dĂ©terminer l'ampleur de la violation et Ă identifier les responsables. Les autoritĂ©s travaillent Ă sĂ©curiser les systĂšmes...