> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
La FinTech française Harvest, qui compte plus de 4600 sociétés clientes, a été victime d'une cyberattaque par ransomware le 27 février dernier, rendant son site web et ses services inaccessibles. L'entreprise n'a pas encore communiqué officiellement sur l'incident, mais les données établies sont ind...
La ville d'Orangeville a été victime d'une cyberattaque et a pris des mesures immédiates pour protéger les informations et limiter les risques. Les experts en cybersécurité et les autorités locales collaborent pour comprendre l'ampleur de l'incident. La ville s'engage à maintenir la transparence et...
99% of organizations report API-related security issues, highlighting risks from API growth
Scott & Kraus, LLC experienced an IT outage on February 27, 2025, which led to unauthorized access to their network and potential data breach. The breach may have involved personal information, including names and other details. A cyberattack against Scott & Kraus was claimed by Kraken on June 28.
DISA Global Solutions confirms data breach affecting 3.3M people, exposing sensitive personal info
I first deployed my Pi-hole back in 2018 and ever since then, I've never looked back! Pi-hole have just dropped a pretty major update and, of course, I wanted to get HTTPS up and running on the Web UI like I had before. Pi-hole v6I won'
Meredith Whittaker, Signal's CEO, has threatened to pull the company out of Sweden if a proposed government bill requiring encryption backdoors becomes law
HaveIBeenPwned has added over 500 million new passwords and email addresses lifted via infostealers
Ransomware payments trending down, the cyber-resilience gap facing SMBs, and APT groups embracing generative AI – it's a wrap on another month filled with impactful security news
IVF clinic Genea has confirmed that stolen patient data has been published online, with the Termite ransomware group appearing to be the perpetrators
Europe is hit hard as geopolitics drives increase in state-backed APT and hacktivist activity
On February 26, 2025, Vitenas Cosmetic Surgery, PA detected an unauthorized attempt to infiltrate its computer network and launched a forensic investigation, which concluded on March 28, 2025. The investigation determined that some patient data—including names, dates of birth, Social Security number...
DermCare Management, une société de gestion de pratiques médicales basée en Floride, a subi une faille de sécurité qui a affecté plusieurs pratiques de dermatologie. Les informations personnelles et médicales de patients ont pu être compromises. L'enquête est toujours en cours pour déterminer l'éten...
Posted by Alex Rebert, Security Foundations, Ben Laurie, Research, Murali Vijayaraghavan, Research and Alex Richardson, SiliconFor decades, memory safety vulnerabilities have been at the center of various security incidents across the industry, eroding trust in technology and costing billions. Tradi...
61% of hackers use new exploit code within 48 hours, ransomware remains top threat in 2024
Ghostwriter cyber-attack targets Ukrainian, Belarusian opposition using weaponized Excel documents
In today’s rapidly evolving digital landscape, securing web applications at scale is a challenge, even for the most well-resourced organizations. Large enterprises operate thousands of applications an
Forescout observed the recently identified Chinese hacking group using medical imaging software applications to deliver malware
ReliaQuest claims 80% of ransomware attacks now focus solely on exfiltrating data as it is faster
In this blog, we’ll talk about one of our most popular, but rarely published report types and how adding threat modeling to your organization can save you from becoming the next billion-dollar headline.