[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (5 articles)

|

// AI-powered summary generated at 04:00

> BEC Attacks Surge 20% Annually Thanks to AI Tooling
A Vipre study reveals a 20% increase in business email compromise attacks
> CVE-2024-28056: Exploit an AWS Amplify Vulnerability in Same-Account Scenarios
An in-depth explanation of how to still abuse CVE-2024-28056, a vulnerability in AWS Amplify that exposed IAM roles to takeover.
> Urgent Blood Appeal Issued in US After Ransomware Attack
US non-profit OneBlood has issued an urgent appeal for donations after a ransomware attack has significantly reduced its capacity to distribute blood to hospitals
> New SMS Stealer Malware Targets Over 600 Global Brands
Discovered by Zimperium’s zLabs team, the SMS Stealer malware was found in over 105,000 samples
> Unlock enhanced API scanning with Burp Suite
More comprehensive scans. More vulnerabilities identified. More time saved. Enhance your API scanning with Burp Suite. As web portfolios have diversified, APIs have become an increasingly critical fun
> Meta to Pay Texas $1.4bn for Unlawful Biometric Data Capture
Meta has agreed a $1.4bn settlement with the State of Texas for failing to inform Facebook users about its biometric data capturing practices
> New PyPI Package Zlibxjson Steals Discord, Browser Data
According to Fortinet, PyPI package Zlibxjson steals Discord tokens and browser data, including passwords and extensive user information
> C-Edge Technologies
Une cyberattaque suspectée a touché C-Edge Technologies, ce qui a perturbé les paiements de détail de UPI (Unified Payments Interface). Cette attaque a entraîné des problèmes pour les utilisateurs qui tentent d'effectuer des transactions en ligne. Les détails de l'incident ne sont pas encore clairs,...
> DDoS Attack Triggers New Microsoft Global Outage
A global outage of Microsoft services was triggered by a DDoS attack, with an error Microsoft’s DDoS protection measures amplifying the impact
> Cost of a Data Breach Surges 10% on Shadow Data Challenge
IBM reveals a 10% increase in the global cost of a data breach to $4.9m
> Virtualcom Interactive Srl
Les journaux La Notizia, La Provincia di Cremona e Crema, La Sicilia, ou encore Il Notiziario sont actuellement indisponible en édition digitale en raison d'une cyberattaque touchant la société qui héberge et diffuse leurs éditions numériques. Le serveur touché a été isolé et fait l'objet d'une opér...
> Researchers Uncover Largest Ever Ransomware Payment of $75m
Zscaler warns of copycat attacks after revealing one ransomware victim paid $75m
> Insurance Company of the West Indies (ICWI)
La Insurance Company of the West Indies (ICWI) a été victime d'une cyberattaque en juillet, qui a pu entraîner une violation de données. L'enquête est toujours en cours, mais la société a pris des mesures pour contenir la situation et sécuriser son environnement. Les clients sont avertis de rester v...
> Massachusetts Association for Mental Health
Fin juillet 2024, MAMH a découvert une cyberattaque contre ses systèmes et a fait appel à un consultant en cybersécurité pour enquêter sur l'incident. L'enquête a révélé que l'attaquant avait accédé aux systèmes de MAMH entre février et juin 2024, et a potentiellement pu accéder à des informations p...
> Protect Your Copilots: Preventing Data Leaks in Copilot Studio
Microsoft’s Copilot Studio is a powerful, easy-to-use, low-code platform that enables employees in an organization to create chatbots. Previously known as Power Virtual Agents, it has been updated (including GenAI features) and rebranded to Copilot Studio, likely to align with current AI trends. Thi...
> Sophisticated Phishing Campaign Targets Microsoft OneDrive Users
The OneDrive campaign uses social engineering to trick users into executing a PowerShell script
> Stolen GenAI Accounts Flood Dark Web With 400 Daily Listings
According to eSentire, around 400 GenAI account logins are sold daily on the dark web, including credentials for GPT, Quillbot, Notion and Replit
> Our audit of Homebrew
This is a joint post with the Homebrew maintainers; read their announcement here! Last summer, we performed an audit of Homebrew. Our audit’s scope included Homebrew/brew itself (home of the brew CLI), and three adjacent repositories responsible for various security-relevant aspects of Homebrew’s op...
> ICO Slams Electoral Commission for Basic Security Failings
The ICO found that the Electoral Commission did not have appropriate security measures in place, allowing hackers to access the personal details of 40 million UK voters
> Just One in 10 Attacks Flagged By Security Tools
Picus Security claims just 12% of simulated attacks trigger an alert