> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
Despite claims by Brain Cipher that the ransomware gang had targeted Deloitte, the consultancy firm says its systems have not been affected
A European law enforcement operation took down a specialized online marketplace that operated as a central hub for the trade of illegally obtained information
Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages
La société de télécommunications néo-zélandaise Compass Communications a confirmé avoir été victime d'une cyberattaque par le groupe de ransomware RA World, qui a volé 250 Go de données internes et clientèles. Les données volées incluent des informations financières, des données de ressources humain...
Lands ' End experienced a data security incident where an unauthorized third party accessed a small portion of its corporate network, potentially exposing personal information of current and former employees and their dependents.
A playbook on how to exploit AWS resources that can be misconfigured via resource-based policies.
A supply chain attack on the Solana library utilizing malicious npm versions has exposed private keys, putting crypto funds at risk
Veeam has released patches for critical VSPC flaws, requiring immediate attention from affected service providers
Yang Ming Marine Transport Corp. a été victime d'une cyberattaque le 5 décembre 2024, mais a rapidement activé ses mécanismes de défense et a collaboré avec des experts en cybersécurité pour résoudre l'incident. L'impact sur les opérations de l'entreprise est considéré comme négligeable. L'entrepris...
An FBI alert warned that GenAI tools are improving the believability of fraud schemes and enabling large scale attacks
Microsoft has found that Russian APT Secret Blizzard piggybacks on other cybercriminals' infr4asytructure to conduct cyber espionage
Bath Fitter a été victime d'une cyberattaque entre le 4 et le 5 décembre 2024, au cours de laquelle un acteur malveillant s'est fait passer pour un technicien informatique afin d'infiltrer le réseau, y déployer un ransomware et potentiellement exfiltrer des données. Une notification provisoire a été...
World Economic Forum data shows G20 executives are more concerned about economic risks that cyber-threats
The National Crime Agency has made scores of arrests in a bid to bring down two major Russian money laundering networks
Articles
Mobile VPN with SSL Client for Windows file size increased in v12.11
Known Issues
Trj/RansomDecoy.A false positive detections with WatchGuard Endpoint Security
WatchGuard Endpoint Security network infrastructure causes Windows BSOD crashes in driver NNSHTTP when browsing pages
Mobile VPN...
Orange Cyberdefense found that hacktivist gang Noname has almost exclusively targeted European countries since March 2022, with no attacks impacting the US
Ransomware attacks cost manufacturing $17bn in downtime since 2018, with $1.9m daily losses, according to Comparitech
Australian Ransomware Attack, 4 December 2024: Queensland - Ransomware group KillSec claims hack on gym management software provider Brisbane-based Clubfit Software. Stolen data, approximately 200 gigabytes, includes sensitive information such as gym membership agreements with customer details.
The...
In a settlement announced on Tuesday, the FTC banned Gravy Analytics and Mobilewalla from selling sensitive location data
Wirral University Teaching Hospital is recovering from a cybersecurity incident that occurred on November 25, with some patient services still disrupted as systems are being restored