> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
ESET Mail Security for Microsoft Exchange Server version 11.1.10009.0 and ESET Security for Microsoft SharePoint Server version 11.1.15003.0 have been released and are available for download from the ESET website or upgrade from ESET PROTECT repositories.
Energy contractor ENGlobal reported that sensitive personal data was stolen by threat actors, with the incident disrupting operations for six weeks
Group-IB researchers have exposed the highly organized affiliate platform and sophisticated operations of the Lynx Ransomware-as-a-Service group
Key derivation is essential in many cryptographic applications, including key exchange, key management, secure communications, and building robust cryptographic primitives. But it’s also easy to get wrong: although standard tools exist for different key derivation needs, our audits often uncover imp...
A Ponemon Institute survey highlighted the growing impact of ransomware attacks on victims’ revenue and reputation
An API supply-chain attack affecting a popular online travel booking service put millions of airline users at risk
Your organization’s application portfolio is growing and so are the risks. With every new web app, API, or microservice, attackers find new vulnerabilities to exploit. Meanwhile, your AppSec teams are
The number of data breach victims increased 312% annually to exceed 1.7 billion in 2024, according to the ITRC 2024 Annual Data Breach Report
The three Russian hackers are believed to be part of Unit 29155 of the GRU, also known as Cadet Blizzard, Ember Bear and Ruinous Ursa
A look at how network security works in Kubernetes
Three men have been sentenced after pleading guilty to running an account hijacking service for fraudsters
Le groupe Smiths a été victime d'une cyberattaque qui a entraîné un accès non autorisé à ses systèmes. L'entreprise a rapidement isolé les systèmes affectés et a activé ses plans de continuité des activités, et elle travaille maintenant avec des experts en cybersécurité pour récupérer les systèmes e...
L'éditeur de solutions métiers AAA Data a été victime d'une cyberattaque ciblée le 28 janvier, détectée par son centre opérationnel de sécurité (SOC) à 6h23. L'entreprise a immédiatement confiné son système d'information et mobilisé ses partenaires forensiques, et travaille en collaboration avec les...
A new phishing tactic has been identified by Cisco Talos, using hidden text salting to evade email security measures
Obsidian found that threat actors are focusing on SaaS applications to steal sensitive data, with most organizations' security measures not set up to deal with these attacks
Forte de son expérience dans la cybersécurité parmi des acteurs majeurs du secteur, Florence Puybareau prendra la direction du Clusif, l’association des professionnels de la cybersécurité, reconnue d’utilité publique.  Le Clusif est heureux et fier d’annoncer l’arrivée de Florence Puybareau, qui pr...
A novel phishing campaign identified by Zimperium targets mobile users with malicious PDFs, impersonating USPS to steal credentials
74% of CISOs plan to increase their cyber crisis simulation budgets in 2025
Quotes and Memes: "There are two types of companies: those who have been hacked, and those who don’t yet know they have been hacked" - John Chambers
The post Quote: John Chambers “There are two types of companies….” appeared first on Australian Information Security Awareness and Advisory.
A now-patched vulnerability could have enabled threat actors to remotely control Subaru cars