> TODAY'S SUMMARY (1 articles)
Today's cybersecurity news highlights a significant vulnerability where attackers are exploiting Check Point firewalls, turning them into gateways for further infiltration into customer networks. This underscores the evolving threat landscape, where traditional security measures are being repurposed against organizations. Additionally, the trend of utilizing legitimate security devices as footholds by attackers indicates a need for enhanced monitoring and response strategies. The incident serves as a reminder that perimeter defenses must be continuously assessed and updated to counter sophisticated attacks. Organizations are urged to reinforce their security protocols and ensure comprehensive visibility across their networks.
|
// AI-powered summary generated at 04:00
Fortinet and Ivanti published advisories on the same day revealing that attackers are exploiting new zero days, one of which is rated critical
This post will examine the cryptography behind passkeys, the guarantees they do or do not give, and interesting cryptographic things you can do with them, such as generating cryptographic keys and storing certificates.
While appearing unsophisticated on the surface, Chihuahua Stealer uses advanced methods
Law enforcers from multiple countries team up to dismantle a multimillion-euro fraud gang
Over the past year, we’ve been hard at work making Burp Suite Professional faster, smarter, and more powerful than ever before. From the launch of Burp AI to major performance upgrades, there's never
Microsoft has patched seven zero-day bugs, five of which were exploited in the wild
[Mise à jour du 15 mai 2025] Une preuve de concept est publiquement disponible sur Internet. [Publication initiale] Le 13 mai 2025, Ivanti a publié deux avis de sécurité concernant les vulnérabilités CVE-2025-4427 et CVE-2025-4428. L'utilisation combinée de ces deux vulnérabilités permet...
Le district scolaire de Central Point 6 a subi une faille de sécurité qui a touché ses systèmes numériques, les experts en cybersécurité et les forces de l'ordre enquêtent sur l'incident. Le district a activé des protocoles de cybersécurité et a isolé les systèmes touchés pour prévenir d'autres prob...
Une attaque informatique a touché le comté de Morgan, en Alabama, laissant plusieurs systèmes hors service pendant des jours. L'attaque a affecté la liste des détenus et les mandats. Les autorités du comté de Morgan continueront à publier les arrestations quotidiennes jusqu'à ce que les systèmes soi...
[Mise à jour du 15 mai 2025] Une preuve de concept est publiquement disponible sur Internet. [Publication initiale] Le 13 mai 2025, Ivanti a publié deux avis de sécurité concernant les vulnérabilités CVE-2025-4427 et CVE-2025-4428. L'utilisation combinée de ces deux vulnérabilités permet...
Cellcom a subi une attaque cyber qui a causé une panne de service, mais aucune information personnelle des clients n'a été compromise. L'entreprise travaille à restaurer le service, qui est actuellement limité aux appels et messages texte entre les clients Cellcom. Le CEO de Cellcom a présenté ses e...
Un entreprise de Hagen a été victime d'une attaque informatique, mais les données des clients n'ont pas été compromises. L'entreprise n'a pas reçu de demande de rançon et les systèmes IT sont actuellement inaccessibles. L'incident est en cours d'investigation.
A single flip of a settings button enables a host of defenses against hacking.
An unauthorized third-party accessed TransUnion's network environment, potentially exposing personal information of approximately 1781 Rhode Island residents. The incident occurred on or about May 14, 2025, and was discovered on or about May 14, 2025. The attack was claimed by Medusa on June 1st.
Posted by Dave Kleidermacher, VP Engineering, Android Security and Privacy
Android’s intelligent protections keep you safe from everyday dangers. Our dedication to your security is validated by security experts, who consistently rank top Android devices highest in security, and score Android smar...
Posted by Il-Sung Lee, Group Product Manager, Android Security
Protecting users who need heightened security has been a long-standing commitment at Google, which is why we have our Advanced Protection Program that provides Google’s strongest protections against targeted attacks.To enhance these ex...
ESET PROTECT Hub version 1.12.2 has been released.
Marbled Dust has been exploiting a vulnerability in user accounts associated with the Kurdish military operating in Iraq for over a year, according to Microsoft
Cyber espionage campaign linked to North Korean actor TA406 targeted Ukrainian government entities
Le 13 mai 2025, Fortinet a publié un avis de sécurité concernant la vulnérabilité CVE-2025-32756. Celle-ci permet à un attaquant non authentifié d'exécuter du code arbitraire à distance. L'éditeur indique que cette vulnérabilité est activement exploitée. Les exploitations constatées jusqu'ici...