> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
A new supply chain attack targets Ethereum tools, exploiting npm packages to steal sensitive data
The PhishWP plugin enables scammers to create fake payment pages, stealing sensitive data via Telegram
Aspire Rural Health System suffered a data breach after an unauthorized party gained access to their internal network from November 4, 2024, to January 6, 2025. The breach involved the theft of personal information, including full names. The organization is offering complimentary credit monitoring s...
Taiwan’s security service said government networks faced 2.4 million attacks in 2024, most of which are attributed to Chinese state actors
Threat actors are tricking victims into downloading malware with the promise of testing a new videogame
New Horizons Baking Company, LLC, and its subsidiaries suffered a data breach between January 6, 2025, and January 10, 2025, resulting in unauthorized access to certain files containing names and Social Security numbers. The breach was discovered on January 11, 2025, and claimed by Cactus on Frebrua...
Scam Sniffer claims that threat actors used wallet drainers to steal $494m from victims in 2024
I am a bag nerd. I have more backpacks, briefcases, totes, and duffels than I will ever need, or could ever use. I am extremely picky about having the appropriate bag for each job. Many of you already know that I rely on the SLNT E3 Backpack when I travel, as I reviewed in Issue […]
Le conseil scolaire de Upper Canada District School Board (UCDSB) fait face à une perturbation importante de son réseau, ce qui affectera toutes les écoles demain. Les écoles resteront ouvertes, mais il n'y aura pas d'accès à internet, ce qui signifie que les employés ne pourront pas accéder à leurs...
Deux districts scolaires du Maine ont été victimes de problèmes de cybersécurité au cours du week-end, obligeant l'un d'eux à déconnecter son réseau internet pour protéger les données des étudiants. L'attaque a été détectée par un service de surveillance de la sécurité qui a alerté les responsables...
The US government said that China based firm Integrity Technology Group provided infrastructure for Flax Typhoon to attack multiple US targets
La Swissmem-Ausgleichskasse a été victime d'une cyberattaque qui a entraîné la fuite de environ 10% de ses données au cours du week-end des 4 et 5 janvier. Pour l'instant, il n'y a pas de preuves que les données volées aient été utilisées de manière malveillante ou publiées. L'enquête est en cours p...
Deux districts scolaires du Maine ont été victimes de problèmes de cybersécurité au cours du week-end, obligeant l'un d'eux à déconnecter son réseau internet pour protéger les données des étudiants. L'attaque a été détectée par un service de surveillance de la sécurité qui a alerté les responsables...
Atos Group has denied the ransomware group Space Bears' claims of compromising its database, calling the allegations unfounded
Un hôtel à Großarl a été victime d'une cyberattaque, où des hackers ont verrouillé son système informatique à l'aide d'un logiciel de cryptage et ont demandé 14 000 euros en bitcoin pour déverrouiller les données. L'hôtel a refusé de payer la rançon. La police enquête sur l'incident, mais le montant...
Former Terraform CEO Do Hyeong Kwon is now in the US facing federal fraud charges
Two separate campaigns have been stealing credentials and browsing history for months.
Docomo has revealed a DDoS attack on Thursday took down key services
The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector
I regularly look at how the system prompts of chatbots change over time. Updates frequently highlight new features being added, design changes that occur and potential areas that might benefit from more security scrutiny.
A few months back I noticed an interesting update to the M365 Copilot (BizChat...