> TODAY'S SUMMARY (1 articles)
Today's cybersecurity news highlights a significant vulnerability where attackers are exploiting Check Point firewalls, turning them into gateways for further infiltration into customer networks. This underscores the evolving threat landscape, where traditional security measures are being repurposed against organizations. Additionally, the trend of utilizing legitimate security devices as footholds by attackers indicates a need for enhanced monitoring and response strategies. The incident serves as a reminder that perimeter defenses must be continuously assessed and updated to counter sophisticated attacks. Organizations are urged to reinforce their security protocols and ensure comprehensive visibility across their networks.
|
// AI-powered summary generated at 04:00
Banking giant UBS revealed it had suffered a data breach following a cyber-attack on procurement service provider Chain IQ
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2058.0 have been released and are available for download.
Cato Networks researchers demonstrated an attack leveraging Atlassian’s AI agent-enabling server
An alleged former member of the infamous Ryuk ransomware group has been extradited to the US
La chaîne de magasins de matériaux de construction Leymann-Baustoffe a été victime d'une attaque informatique, affectant également des filiales à Storkow, Beeskow, Eisenhüttenstadt et Francfort-sur-l'Oder. Les détails de l'attaque ne sont pas précisés dans l'article. L'entreprise est basée en Allema...
Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex
Le district scolaire de Bonneville a subi une attaque informatique, ce qui a entraîné la fermeture de son réseau pour des raisons de sécurité. Les programmes d'école d'été sont actuellement perturbés en raison de cette attaque. Aucune donnée n'a été compromise ou perdue lors de l'attaque, grâce à l'...
Une attaque cybernétique a touché le conseil municipal de Glasgow, provoquant des perturbations dans les services en ligne et potentiellement entraînant le vol de données client. Les autorités sont en train d'enquêter sur l'incident et les services affectés sont temporairement indisponibles. Les cit...
Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions
Un prestataire de l'agence régionale bruxelloise du stationnement a été victime d'une cyberattaque, et des données de ses usagers ont été volées. Les données subtilisées incluent le nom, prénom, adresse postale, adresse électronique, numéro d'immatriculation du véhicule, numéro de téléphone et numér...
CGP&H, LLC suffered a data breach where an unknown actor gained access to certain parts of its network between June 19, and June 20, 2025, and may have accessed or acquired certain files. The breach may have exposed name and Social Security number/Individual Taxpayer Identification Number. A cyberat...
Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025
Written by: Gabby Roncone, Wesley Shields
UPDATE (July 10)
In late June 2025, Google Threat Intelligence Group (GTIG) discovered continued UNC6293 operations that demonstrate an evolution in the group’s tradecraft. Using similar lure themes as previously observed activity, UNC6293 continued the ASP...
Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud
ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest
File parsers in Go contain unexpected behaviors that can lead to serious security vulnerabilities. This post examines how JSON, XML, and YAML parsers in Go handle edge cases in ways that have repeatedly resulted in high-impact security issues in production systems. We explore three real-world attack...
The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups
The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason
Activities which organisations must carry out to migrate safely to post-quantum cryptography in the coming years.
Payment processor Paddle has agreed to settle with the FTC over allegations related to tech support scams