> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
Posted by Dirk GöhmannIn 2024, our Vulnerability Reward Program confirmed the ongoing value of engaging with the security research community to make Google and its products safer. This was evident as we awarded just shy of $12 million to over 600 researchers based in countries around the globe acros...
Travelers found that ransomware groups are focusing on targeting weak credentials on VPN and gateway accounts for initial access, marking a shift from 2023
AI-driven cyberattacks are rapidly escalating, with a vast majority of security professionals reporting encounters and anticipating a surge, while struggling with detection
La société Crystal D, fournisseur de produits de promotion, a été victime d'une cyberattaque qui a perturbé ses opérations, notamment la communication et les livraisons. Pour l'instant, il n'y a pas d'indice que les hackers aient accédé à des informations sensibles des clients. Les efforts sont en c...
Symantec found that Medusa has listed almost 400 victims on its data leaks site since early 2023, demanding ransom payments as high as $15m
IES Communications, LLC suffered a cybersecurity incident involving a cyber threat actor attempting to deploy ransomware and gain unauthorized access to files containing personal information. The incident was discovered on March 17, 2025, and an investigation is ongoing to determine the full scope o...
Nippon Steel Solutions a été victime d'une attaque informatique, basée sur l'exploitation d'une vulnérabilité 0-day.
An arbitrary file upload vulnerability in the Chaty Pro plugin has been identified, affecting 18,000 WordPress sites
Attackers are actively exploiting an RCE flaw in Windows PHP-CGI implementations to target Japanese firms, deploying Cobalt Strike for persistence
Obtain persistence by creating a rogue OIDC Identity Provider.
Layoffs and cutbacks have been cited as major factors in a significant drop in job satisfaction among women working in cybersecurity, according to ISC2
Enisa identifies six sectors that it says must improve on NIS2 compliance
Vulnerability Scanning solutions offer a cost-effective way to discover and manage common security issues.
The DoJ has charged Chinese government and i-Soon employees for a series of for-profit data theft campaigns
This post concludes a four-month performance study of OpenSearch and
Elasticsearch search engines across realistic scenarios using OpenSearch
Benchmark (OSB). Our full report includes the detailed findings and
comparison results of several versions of these two applications.
Le ministère israélien de la Santé a annoncé une possible cyberattaque sur les ordinateurs du réseau médical Bikur Rofeh, qui fournit des services médicaux d'urgence. Les équipes de cybersécurité du réseau enquêtent sur l'incident pour déterminer si des données ont été compromises et dans quelle mes...
L'hébergeur Digital Forest a été victime d'un acte malveillant qui a affecté ses clients pendant plusieurs jours. Certains faisaient état de 5 jours d'indisponibilité quand d'autres indiquait que la situation était résolue au 11 mars.
Chinese espionage group Silk Typhoon is increasingly exploiting common IT solutions to infiltrate networks and exfiltrate data
Fusion Medical Staffing experienced a data security incident where unauthorized individuals acquired certain files containing personal information. The affected data included names, dates of birth, Social Security numbers, driver's licenses, and medical information. The organization has taken steps...
WatchGuard Technologies is announcing the end-of-sale (EOS) date for the Firebox T45 model. The T45 model will be replaced by the T45-PoE, which offers identical performance and functionality but also includes one PoE port.
Effective April 1, 2025, the T45 will no longer be available for purchase an...