> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
Recently I came across a fantastic new paper by a group of NYU and Cornell researchers entitled “How to think about end-to-end encryption and AI.” I’m extremely grateful to see this paper, because while I don’t agree with every one of its conclusions, it’s a good first stab at an incredibly importan...
Le lycée Blacon High School, situé dans le Cheshire, a été contraint de fermer temporairement après avoir été victime d'une attaque par rançongiciel. L'établissement sera fermé les 20 et 21 janvier pour permettre à une entreprise de cybersécurité d'enquêter sur la violation de données. La réouvertur...
L'United Domestic Workers of America (UDW) a signalé une violation de données à la suite d'une cyberattaque, qui a permis à une partie non autorisée d'accéder à des informations sensibles de ses membres, notamment leurs noms, numéros de sécurité sociale et adresses. L'UDW a lancé une enquête avec l'...
De multiples vulnérabilités ont été découvertes dans SPIP SPIP. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Prestige Maintenance USA experienced a data security incident where unauthorized access to certain personal information occurred. The incident was discovered on January 17, 2025, and the company took immediate action to secure its systems. Approximately one Maine resident's information was potential...
Medical Associates of Brevard, LLC suffered a criminal cyberattack that impacted their systems, potentially exposing protected health information and personally identifiable information. The attack was claimed by BianLian on February 2.
Posted by Erik Varga, Vulnerability Management, and Rex Pan, Open Source Security TeamIn December 2022, we announced OSV-Scanner, a tool to enable developers to easily scan for vulnerabilities in their open source dependencies. Together with the open source community, we’ve continued to build this t...
Wakefield & Associates, LLC experienced an unauthorized access and/or acquisition of certain files within their network, potentially exposing client information. The incident occurred on or before January 17, 2025, and was discovered earlier this year. A cyberattack against Wakefield & Associates wa...
Middle East real estate scams are surging as fraudsters exploit online listings and bypassed due diligence checks
Truth Social, launched by the Trump Media & Technology Group in 2022, has become a hotspot for scams like phishing and investment fraud
New Zealand: Law Firm Ransomware Attack, 16 January 2025. New Zealand law firm Bell & Graham confirms SafePay ransomware attack. Claimed stolen 15 gigabytes of data, including legal correspondence and a large amount of identification documents.
The post NZ Incident: New Zealand law firm Bell &am...
The US President’s second cybersecurity Executive Order will impose stricter security standards on software providers
Compliance with the Digital Operational Resilience Act (DORA) has cost many businesses over €1 million, according to research from Rubrik
Le groupe de cybercriminels DragonForce a revendiqué la responsabilité d'une cyberattaque contre Heart Centre, un réseau de cliniques de cardiologie en Nouvelle-Galles du Sud, en Australie. Cette attaque a entraîné le vol de données sensibles concernant des patients, notamment des diagnostics et des...
The leak likely comes from a zero-day exploit affecting Fortinet’s products
A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant
L'application SportAdmin, utilisée par environ 1 700 clubs de sport en Suède, a été victime d'une cyberattaque qui a pu entraîner la fuite de toutes les données personnelles de ses utilisateurs. L'attaque a été détectée jeudi dernier et le système a été fermé temporairement avant d'être rouvert pour...
HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI
A new EU action plan will be structured around four pillars: prevention, threat detection and identification, response to cyber-attacks and deterrence
Le bureau du greffier du comté de Pulaski a déclaré avoir récupéré après une cyberattaque. Les détails de l'incident ne sont pas précisés, mais le bureau a confirmé avoir repris ses activités normales. L'enquête sur l'incident est toujours en cours.