> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
The vulnerabilities, now patched, posed significant risks, including unauthorized file uploads, privilege escalation and SQL injection attacks
US healthcare giant Ascension revealed that 5.6 million individuals have had their personal, medical and financial information breached in a ransomware attack
An end of year summary for Hacking the Cloud in 2024.
Cryptomining malware hits popular npm packages rspack and vant, posing risks to open source tools
A new digital operation has enabled Interpol to identify scores of human traffickers operating between South America and Europe
An unauthorized third party gained access to certain Monroe University computer systems between December 9, 2024, and December 23, 2024, and acquired copies of some files on their network. The incident involved some personal information, but there is no evidence that it has been used for identity th...
The Information Commissioner’s Office has warned that millions of Brits don’t know how to erase personal data from their old devices
Le Groupe a récemment été victime d'un incident de ransomware, au cours duquel un tiers non autorisé a accédé à ses serveurs. Grâce à des actions rapides et à l'utilisation de systèmes de sauvegarde, l'impact sur les opérations a été minimal, et une évaluation préliminaire indique que l'incident n'a...
La société Nikki-Universal, un fabricant de produits chimiques, a été victime d'une attaque de ransomware sophistiquée, au cours de laquelle les hackers ont volé 761,8 Go de données. Le groupe de ransomware Hunters International, connu pour ses tactiques agressives, a revendiqué la responsabilité de...
OpenAI must also initiate a six-month public awareness campaign across Italian media, explaining how it processes personal data for AI training
Le 22 décembre 2024, HEXPOL a détecté un accès non autorisé à son réseau informatique. L'entreprise a immédiatement sécurisé ses systèmes, lancé une enquête avec des experts en cybersécurité, et mené une analyse approfondie des fichiers potentiellement compromis. Le 25 juin 2025, il a été confirmé q...
Graebel Companies, Inc. experienced a network disruption involving certain computer systems and services in December 2024, resulting in unauthorized access to files between December 19, 2024, and December 22, 2024. The incident was discovered in December 2024, and the company has since taken steps t...
The Security Service of Ukraine has accused Russian-linked actors of perpetrating a cyber-attack against the state registers of Ukraine
CPAP Medical Supplies and Services Inc. experienced a data breach, potentially exposing personal and medical information. The company is offering complimentary credit monitoring and recommends that affected individuals place a fraud alert on their credit files. Additional resources are provided for...
The LockBitSupp persona said LockBit 4.0 will be launched in February 2025
The FBI has issued a warning about the Hiatus RAT malware targeting Xiongmai and Hikvision web cameras and DVRs, urging users isolate these devices from networks
Le module d’assistance cyber en ligne de Cybermalveillance.gouv.fr évolue ! Le dispositif rejoint par le Clusif en 2022 devient le 17Cyber, et il est toujours disponible en page d’accueil de notre site. Ce service est proposé par la Police Nationale, la Gendarmerie Nationale et Cybermalveillance.gou...
The US Cybersecurity and Infrastructure Security Agency recommended users turn on phishing-resistant MFA and switch to Signal-like apps for messaging
A Dragos report observed 23 new ransomware groups targeting industrial organizations in Q3 2024
An unauthorized party gained access to Nth Degree's network environment, potentially accessing personal information between December 12, 2024, and December 20, 2024. The incident was discovered on May 14, 2025. Nth Degree is offering complimentary credit monitoring services to affected individuals.