> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
The US government has sanctioned Russian state-affiliated entity CGE, which used a vast GenAI infrastructure to spread disinformation during the US Presidential election
I regularly look at how the system prompts of chatbots change over time. Updates frequently highlight new features being added, design changes that occur and potential areas that might benefit from more security scrutiny.
A few months back I noticed an interesting update to the M365 Copilot (BizChat...
La Police de Kingston, en Ontario, a été victime d'une cyberattaque qui a ralenti certains de ses services, mais elle assure que les appels urgents sont toujours traités rapidement. L'escouade de la cybercriminalité de la Police provinciale de l'Ontario participe à l'enquête. La police a mis en plac...
Sekoia’s innovative PlugX malware disinfection campaign removed active threats across ten countries
DoubleClickjacking bypasses X-Frame-Options and SameSite cookies in double-click sequences, exposing UI authentication flaws
Le fournisseur de soins de santé américain Community Health Center (CHC) a été victime d'une cyberattaque qui a compromis les données personnelles et de santé de plus de 1 million de patients. Les attaquants ont volé des fichiers contenant des informations sensibles, mais n'ont pas chiffré les systè...
The US government has set out proposals to increase security obligations on healthcare providers to protect patient data amid surging cyber-attacks in the sector
The State of Rhode Island has confirmed that cybercriminals have begun publishing data stolen from its social services portal, the RIBridges system
Dans le cadre de sa prochaine conférence, le Clusif invite les acteurs de la cybersécurité et du quantique à partager leurs expertises, perspectives et solutions innovantes autour des enjeux du chiffrement post-quantique. Contexte et enjeux L’actualité des derniers mois a fait la part belle aux déve...
Over 2.5 million end users are at risk as researchers discover 36 compromised Chrome extensions
Chinese hackers appear to have compromised Treasury machines via a trusted third party
Well, the writing has been on the wall for some years now, arguably over a decade, but the time has finally come where the largest CA in the World is going to drop support for the Online Certificate Status Protocol.What is OCSP?The Online Certificate Status Protocol is a
Insurance firm Markel Direct found that 69% of UK SMEs lack a cybersecurity policy, with a significant lack of basic cybersecurity measures in place across these firms
La branche indienne de l'agence de voyages Thomas Cook a fermé ses systèmes affectés après une cyberattaque qui a pris en charge son infrastructure IT. L'entreprise a lancé une enquête et travaille avec des experts en cybersécurité pour identifier l'ampleur de l'incident et prendre des mesures corre...
Le 30 décembre 2024 au matin, un employé de Pacific Rehabilitation Centers a reçu un message de rançongiciel sur son ordinateur. L’équipe informatique a immédiatement mis en place des mesures de sécurité et déconnecté les serveurs pour protéger les données. Une enquête est en cours : bien que les do...
The US Cybersecurity and Infrastructure Security Agency’s 2024 Year in Review marks Jen Easterly’s final report before resignation
Central New York Cardiology experienced a data breach between December 26, 2024, and December 30, 2024, where an unauthorized individual acquired certain information. The breach was discovered on June 11, 2025, and the organization is providing credit monitoring and identity protection services to a...
La société finlandaise Peikko a été victime d'une cyberattaque lors du week-end des fêtes, affectant également son usine à Höringhausen en Allemagne. Les hackers ont probablement cherché à obtenir de l'argent en volant des données ou en demandant une rançon. Les systèmes de l'entreprise ont été rest...
The vacuum left by RedLine’s takedown will likely lead to a bump in the activity of other a infostealers
Manpower of Lansing MI, Inc. experienced an IT outage that led to unauthorized access to their network between December 29, 2024, and January 12, 2025. The attack was claimed by RansomHub on January 22nd.