> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
In February 2025, Sophos completed the Secureworks deal and SolarWinds went private
Four in ten flaws exploited by threat actors in 2024 were from 2020 or earlier, with some dating back to the 1990s, according to a GreyNoise report
Big shifts in the infostealer scene, novel attack vector against iOS and Android, and a massive surge in investment scams on social media
A joint operation between the Thai and Singapore police has resulted in the arrest of a man allegedly responsible for over 90 data extortion attacks worldwide
NZ Incident - Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
The post NZ Incident: Kiwi car dealership Tristram Eu...
In this blog, we’ll talk about our threat modeling process, TRAIL, which stands for Threat and Risk Analysis Informed Lifecycle. TRAIL enables us to trace and document the impact of flawed trust assumptions and insecure design decisions throughout each client’s system architecture and SDLC. Over tim...
Le département de la Conservation du Missouri enquête sur une activité suspecte détectée sur l'un de ses serveurs de données. Une équipe de réponse d'urgence et une équipe de cybersécurité ont été mobilisées pour analyser les systèmes et les fichiers du département. Si des données individuelles sont...
Karen S. Pouliot CPA, P.A. experienced a data security incident where an unknown actor accessed and acquired personal information without authorization. The incident occurred on February 28, 2025, and the investigation concluded on July 22, 2025. The potentially affected information may have include...
DragonForce ransomware attacks Saudi firms stealing 6TB data, escalating cyber threats in real estate
LoveSac suffered a data breach between February 12, 2025, and March 3, 2025, where an unauthorized actor accessed certain systems and copied files containing name and Social Security number information. Although there is no evidence of identity theft or fraud, LoveSac is offering 24 months of compli...
Montgomery Little & Soran, PC experienced a data security incident that may have included personal information. An unknown actor potentially acquired certain files from their network. The attack was claimed by Weyhro on March 25th..
Winos 4.0 malware uses phishing emails to target organizations in Taiwan, Fortinet experts warn
Veracode found a 47% increase in the average time taken to patch software vulnerabilities, driven by growing reliance on third-party code
With AI's pattern recognition capabilities well-established, Mr. Schölkopf's talk shifts the focus to a pressing question: what will be the next great leap for AI?
In its 2025 Global Threat Report, CrowdStrike observed a significant escalation in Chinese cyber espionage activities
OpenSSF has released new baseline security best practices to improve open source software quality
La FinTech française Harvest, qui compte plus de 4600 sociétés clientes, a été victime d'une cyberattaque par ransomware le 27 février dernier, rendant son site web et ses services inaccessibles. L'entreprise n'a pas encore communiqué officiellement sur l'incident, mais les données établies sont ind...
FBI confirms North Korea’s Lazarus Group responsible for Bybit crypto heist
La ville d'Orangeville a été victime d'une cyberattaque et a pris des mesures immédiates pour protéger les informations et limiter les risques. Les experts en cybersécurité et les autorités locales collaborent pour comprendre l'ampleur de l'incident. La ville s'engage à maintenir la transparence et...
Scott & Kraus, LLC experienced an IT outage on February 27, 2025, which led to unauthorized access to their network and potential data breach. The breach may have involved personal information, including names and other details. A cyberattack against Scott & Kraus was claimed by Kraken on June 28.