> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
We just pushed many updates, simplified our site, improved our FAQ, and incorporated all vital content into our main titles: Extreme Privacy 5 and OSINT Techniques 11. They complement each other as a set, available in print and PDF. Full Details: https://inteltechniques.com/books.html
The NHS Trust is investigating the incident with the help of the National Crime Agency
Romania’s national security council suggested that Russia is behind these attacks, amid a court order for a recount of votes in the first round of the country’s presidential election
La société Kurita Water Industries a annoncé que sa filiale américaine, Kurita America Inc., a été victime d'une cyberattaque par ransomware, entraînant l'accès non autorisé à des serveurs et la potentialité de fuites de données de clients, partenaires et employés. Les serveurs compromis ont été déc...
A report from the charity the Cyber Helpline found that 98% of cyber enabled crimes result in no further action from the police or justice system
Krispy Kreme, Inc. a été victime d'une cyberattaque le 29 novembre 2024, qui a entraîné des perturbations opérationnelles, notamment la fermeture de la commande en ligne aux États-Unis. L'entreprise travaille à contenir et à remédier à l'incident avec l'aide d'experts en cybersécurité et a notifié l...
Brodsky Renehan Pearlstein & Bouquet Chartered (BRPB) a découvert une activité suspecte dans son réseau le 29 novembre 2024. Une enquête a révélé qu'un acteur non autorisé a copié des données sans permission, notamment des noms, des numéros de sécurité sociale, des informations de carte de paiement...
A malicious PyPI package “aiocpa,” that stole crypto wallet data via obfuscated code, has been removed after being reported by Reversing Labs researchers
Stevens & Day suffered a data breach, providing customers with access to credit monitoring and fraud assistance services. The breach led to the notification of affected customers, who were offered free services to protect their information. The incident prompted the company to encourage customers to...
Hicks Thomas, LLP experienced a ransomware incident on November 20, 2024, which may have affected personal information, including date of birth, Social Security Number, and medical information. The incident occurred between November 20, 2024, and November 30, 2024. The organization is offering compl...
A new cyber-attack technique uses Godot Engine to deploy undetectable malware via GodLoader, infecting more than 17,000 devices
This vulnerability was patched in May 2024 but was only allocated a CVE in November after evidence of exploitation
En 2024, le secteur de l'eau a fait l'objet d'une attention particulière des attaquants informatiques notamment dans le contexte des Jeux Olympiques et Paralympiques 2024 et de l'importance portée à la qualité de l'eau de la Seine. A plusieurs reprises au cours de l'année, des groupes...
Customers of Advantech’s EKI-6333AC-2G industrial-grade wireless access point have been urged to update their devices to new firmware versions
European police have arrested 21 individuals linked to a violent Albanian gang after decrypting their Sky ECC communications
De multiples vulnérabilités ont été découvertes dans les produits Synology. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
The CSO of T-Mobile has clarified that no customer information was stolen by Chinese hacking group Salt Typhoon
North Los Angeles County Regional Center experienced a data incident in November 2024, involving unauthorized access to personal information, but no identity theft or fraud was reported. A cyberattack was claimed by Medusa on December 15, 2024.
En 2024, le secteur de l'eau a fait l'objet d'une attention particulière des attaquants informatiques notamment dans le contexte des Jeux Olympiques et Paralympiques 2024 et de l'importance portée à la qualité de l'eau de la Seine. A plusieurs reprises au cours de l'année, des groupes...
APT-C-60 targets Japan with phishing emails, using job application ruse and malware via Google Drive