> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
La Banque de Papouasie-Nouvelle-Guinée (BPNG) a réussi à contenir une récente cyberattaque, sans impact sur les données financières ou les opérations bancaires. L'équipe de cybersécurité de la banque a détecté une activité réseau anormale le 21 février dans un environnement de test isolé, et a résol...
Christopherson Business Travel (CBT) a subi une faille de sécurité qui a compromis des informations de carte de crédit. Les informations compromises incluent les noms, les numéros de carte de crédit et les dates d'expiration. CBT a mis en place des mesures de sécurité renforcées pour prévenir de fut...
Fake job ads target freelance developers, spreading malware via GitHub
Mengel, Metzger, Ba rr & Co., LLP suffered a cyberattack on February 21, 2025, which may have impacted personally identifiable information (PII) of individuals and entities. The incident was discovered on May 19, 2025. The organization has not found any evidence of PII misuse.
ENCON Heating & Air Conditioning experienced a security incident resulting in unauthorized access to some of their computer systems. The breach occurred between February 21 and February 24, 2025, and affected HR files stored locally on their network. The company has not received any reports of perso...
A survey by IANS and Artico found significant regional variation in cybersecurity salary levels across North America
Mobile phishing attacks surged in 2024, with 16% of all incidents occurring in the US, according to a new Zimperium report
A North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims' crypto wallets and steals their login details from web browsers and password managers
Kela researchers 330 million compromised credentials to infostealer activity on over four million machines in 2024
Palo Alto Networks has observed exploit attempts chaining three vulnerabilities in its PAN-OS firewall appliances
ESET researchers analyzed a campaign delivering malware bundled with job interview challenges
CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware
Le *Cloud computing*, devenu incontournable pour les secteurs public et privé, favorise la transformation numérique mais offre également de nouvelles opportunités d’attaques et problématiques de sécurité pour les organisations qui l’utilisent. L'ANSSI observe une augmentation des attaques contre...
Le site web officiel du Haryana State Pollution Control Board (HSPCB) a été piraté jeudi soir et est toujours inaccessible. Les responsables du département ont porté plainte auprès de la cellule cyber de la police de l'État et ont pris des mesures pour sécuriser le site et prévenir de futures attaqu...
Le cabinet d'avocats sydneyen Brydens Lawyers a été victime d'une cyberattaque, entraînant une importante fuite de données. Le cabinet a signalé l'incident au Centre australien de cybersécurité et au Bureau du Commissaire à l'information australien, et a restauré la sécurité de son système informati...
Le *Cloud computing*, devenu incontournable pour les secteurs public et privé, favorise la transformation numérique mais offre également de nouvelles opportunités d’attaques et problématiques de sécurité pour les organisations qui l’utilisent. L'ANSSI observe une augmentation des attaques contre...
LGAA LLC suffered a data breach on February 20, 2025, where an unknown cyber actor accessed a limited portion of their computer network and may have copied files without permission. The breach involved the names and driver's license or state identification numbers and credit or debit card numbers of...
This is the third and penultimate post in a series about theoretical weaknesses in Fiat-Shamir as applied to proof systems. The first post is here, the second post is here, and you should probably read them. Over the past two posts I’ve given a bit of background on four subjects: (1) interactive pro...
ESET Endpoint Antivirus and ESET Endpoint Security for Windows version 12.0.2049.0 have been released and are available for download.
A flaw in the Jupiter X Core plugin has been identified, allowing upload of malicious SVG files and remote code execution on vulnerable servers