> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
Endue Software a subi une cyberattaque en février 2025, exposant les informations personnelles de 118 028 individus, notamment leurs noms, numéros de sécurité sociale, dates de naissance et numéros de dossiers médicaux. Les cybercriminels ont pu accéder à ces informations en raison d'une sécurité in...
AIS InfoSource LP suffered a data breach where an unauthorized actor gained access to its environment and took certain information from two employee systems. The breach occurred between February 16, 2025, and February 21, 2025. AIS has offered credit monitoring services to affected individuals.
Ce bulletin d’actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l’analyse de l’ensemble des avis et alertes publiés par le CERT-FR dans le cadre d’une analyse de risques pour prioriser l’application des...
Incident - University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
The post Incident: Australian National Univers...
Nespresso Greece avertit ses clients d'une faille de sécurité potentielle suite à une attaque informatique en février 2025 contre son partenaire logistique, Orphee Beinoglou International Transportation. Les données compromises pourraient inclure les noms, numéros de téléphone, adresses, emails et n...
Goshen Medical Center suffered a data security incident where certain files may have been accessed or acquired without authorization. The incident involved personal health information, including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and medical record n...
Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts
AI is rapidly gaining traction in virtually every industry. But in AppSec, it's often met with a healthy skepticism, viewed by some as a useless gimmick at best or, at the other end of the scale, a ma
The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security
Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack
Introducing Medusa v1, a cutting-edge fuzzing framework designed to enhance smart contract security.
Une cyberattaque a frappé le Lake Washington Vascular, un fournisseur de soins vasculaires, exposant les données médicales de 21 000 patients et forçant la clinique à cesser ses opérations. Les informations compromises incluent les noms, adresses, historiques médicaux, résultats de tests diagnostiqu...
Veristat, a company, has reported a data event that occurred between February 12-14, 2025, where certain files on their systems were accessed or acquired without authorization. The investigation revealed that personal information, including names and Social Security numbers, was involved in the even...
US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development
Interpool, Inc. suffered a data breach on February 14, 2025, where an unknown cyberactor accessed a limited portion of their computer network and copied files without permission. The breach involved name and other types of personal information. Interpool, Inc. is notifying individuals and providing...
TVM Ventures has selected Trail of Bits as its preferred security partner to strengthen the TON developer ecosystem. Through this partnership, we’ll lead the development of DeFi protocol standards and provide comprehensive security services to contest-winning projects deploying on TON. TVM Ventures...
Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts
Our commitment to innovation At PortSwigger, we're always striving to push the boundaries of what's possible in application security, with a world-leading Research team dedicated to pioneering new hac
Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams
Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets