> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights several significant threats and developments. Huawei has announced the launch of a fully Chinese-manufactured PC amidst rising geopolitical tensions. Japan has declared an information security emergency, signaling heightened concerns over cyber threats. NVIDIA is facing scrutiny after reports emerged of a suspected Chinese espionage plot targeting CEO Jensen Huang, prompting an independent investigation. Additionally, a hacker has claimed responsibility for stealing data from 22 million French motorists, raising alarms over personal data security. Lastly, the NoName hacking group is reportedly targeting companies such as Free, La Poste Mobile, and Danfoss, with threats of data theft and DDoS attacks.
|
// AI-powered summary generated at 04:00
Cthulhu Stealer targets macOS, posing a major threat by disguising as legitimate software via DMG files
The US FAA has proposed new rules for aircraft to address cyber vulnerabilities caused by the increased interconnectivity of critical systems
Recently, I found what appeared to be a regression or bypass that again allowed data exfiltration via image rendering during prompt injection. See the previous post here for reference.
Data Exfiltration via Rendering HTML Image Tags During re-testing, I had sporadic success with markdown rendering t...
The United States bore most of these cyber-threats, with a 46.15% rise in attacks compared to 2023
FCC charges Lingo Telecom with $1m fine over voice deepfake during the 2024 New Hampshire primary election
Les Stadtwerke Burg, un fournisseur d'énergie allemand, a signalé un incident de sécurité dans son système d'information, entraînant des problèmes de communication, mais sans impact sur la fourniture d'énergie aux clients. Les données des clients sont considérées comme sécurisées et protégées. L'ent...
The donation websites of the UK’s seven major political parties are missing critical security features to protect the accounts of donors, according to DataDome
ESET claims new NGate Android malware relays NFC data to steal card details for ATM cash-out
Among the cryptographic missteps we see at Trail of Bits, “let’s build our own tool out of a hash function” is one of the most common. Clients have a problem along the lines of “we need to hash a bunch of different values together” or “we need a MAC” or “we need […]
Quarklabs researchers claim millions of contactless key cards could be cloned via a backdoor
The MoonPeak RAT as used by UAT-5394 showed a possible connection to North Korean threat Kimsuky
Le groupe Cirano, qui comprend plusieurs médias à La Réunion, a été victime d'une attaque informatique rançongiciel massive la nuit dernière, paralysant les systèmes de diffusion. Les équipes travaillent à rétablir les fonctionnalités dans les meilleurs délais. Les médias touchés incluent Antenne Ré...
The LiteSpeed Cache flaw may expose millions of WordPress sites to severe security risks
Australia’s data protection watchdog has decided to stop its investigation into US facial recognition company Clearview AI
La société américaine Halliburton, spécialisée dans les services pétroliers, a été victime d'une cyberattaque, selon une source. L'attaque a affecté les systèmes de l'entreprise et a perturbé ses opérations, notamment au niveau de son campus de Houston. Halliburton a déclaré travailler avec des expe...
Oregon Zoo revealed that an unauthorized actor potentially obtained payment card information used in transactions over six months
The building, located in Washington, DC, will be the new home of the US Cybersecurity and Infrastructure Security
Le 21 août 2024, Dick's Sporting Goods, Inc. a découvert une intrusion non autorisée dans ses systèmes d'information, ce qui a entraîné l'accès à certaines informations confidentielles. L'entreprise a immédiatement activé son plan de réponse à la cybersécurité et a engagé des experts pour enquêter e...
Healthcare has been the most targeted sector according to Barracuda analysis of 200 reported ransomware incidents from August 2023 to July 2024
Malwarebytes report warns security teams to be on high alert for ransomware attacks at night