> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Recorded Future analyzed leaks describing the close relationship between the Iranian government and Iran-aligned APT groups
Cisco found that privacy and data security risks have led to over a quarter of organizations banning generative AI, at least temporarily, while a majority have instituted controls
Le matin du 26 janvier 2024, les systèmes informatiques de Kunath, une entreprise de taille moyenne spécialisée dans la fabrication de vêtements professionnels et basée à Bretnig-Hauswalde, ont été paralysés par une cyberattaque. L'entreprise, qui emploie 57 personnes et produit principalement des v...
ESET said Blackwood has been actively engaged in cyber-espionage since at least 2018
Bugcrowd’s latest report also recorded a 30% surge in web submissions in 2023
For the past eight months, Trail of Bits has worked with the Python Cryptographic Authority to build cryptography-x509-verification, a brand-new, pure-Rust implementation of the X.509 path validation algorithm that TLS and other encryption and authentication protocols are built on. Our implementatio...
A global drop in DeFi hacking gains prompted North Korean threat actors to diversify and extend their victim portfolio, Chainalysis found
Over 350 million individuals were impacted by data breaches in the US in 2023 and 11% of all publicly traded companies have been compromised
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
Southern Water confirmed a data breach had occurred after the Black Basta ransomware group purportedly published personal information held by the firm
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
The Zero Day Initiative’s first Pwn2Own Automotive competition has handed out over $1m for 24 zero-days
Hewlett Packard Enterprise reveals that Russian state APT29 hackers stole data from corporate mailboxes
CounterCraft's co-founder, Dan Brett, explains how they turn the tables so that social engineering can be used to protect organisations from attackers.
La mairie de Santa Cruz do Sul a été victime d'une cyberattaque qui a affecté son réseau informatique, entraînant l'interruption des services de téléphonie et d'internet dans plusieurs de ses départements. En conséquence, le site web de la mairie est hors ligne et les inscriptions pour le processus...
Group Health Cooperative of South Central Wisconsin a alerté ses membres d'un "événement potentiel de cybersécurité", qui a contraint l'assureur santé à fermer certains de ses services en ligne et informatiques. Bien que l'événement ait été rapidement identifié, GHC a sécurisé tous ses systèmes info...
Kaspersky said cybercriminals are exploring schemes to implement ChatGPT in malware development
Finding comes from Menlo Security’s recently released 2023 State of Browser Security Report
At Trail of Bits, we pride ourselves on making our best tools open source, such as Slither, PolyTracker, and RPC Investigator. But while this post is about open source, it’s not about our tools… In 2023, our employees submitted over 450 pull requests (PRs) that were merged into non-Trail of Bits rep...