> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
CrowdStrike unveiled a new Chinese-aligned hacking group allegedly spying on telecom providers
Apple has urged customers to download the security updates, which address vulnerabilities relating to the JavaScriptCore and WebKit frameworks
Australian Ransomware Attack, 20 November 2024: Notorious ransomware gang RansomHub has claimed an attack on a third-party firm that assists businesses with ASIC compliance. RansomHub claims to have exfiltrated 30 gigabytes of data.
The post Incident: RansomHub hits third-party ASIC compliance firm...
OWASP has updated its Top 10 list of risks for LLMs and GenAI, upgrading several areas and introducing new categories
Aqua Security has observed threat actors using compromised Jupyter servers in a bid to illegally stream sporting events
La ville d'Odessa au Texas a été victime d'une cyberattaque le 20 novembre, mais l'équipe de cybersécurité de la ville a réussi à détecter et à stopper l'attaque avant qu'elle ne cause des dommages. Les systèmes de la ville ont été mis hors ligne pour une journée pour s'assurer que tout fonctionnait...
Entrust claims deepfakes are driving a surge in digital identity fraud
Ransomware groups are targeting weekends and holidays to exploit understaffed security teams in order to get the best chance of a pay day
La chaîne de supermarchés italienne Conad a été victime d'une cyberattaque par le groupe de hackers Lynx, qui a volé des documents confidentiels et demande un ransom pour ne pas les diffuser sur le dark web. Les hackers affirment avoir obtenu des informations sur les ressources humaines et les clien...
Une cyberattaque a touché le centre de chirurgie plastique Hand & Plastic Surgery Centre au Michigan, affectant près de 20 000 patients, avec des informations personnelles et de santé protégées exposées. Deux autres entreprises, Dove Healthcare au Wisconsin et Southeast Series of Lockton Companies e...
Easterly and her Deputy Director Nitin Natarajan are expected to leave office before President-elect Trump names a new leadership
Robert H. Clarkson Insurance Agency LLC experienced a cybersecurity incident on November 20, 2024, resulting in unauthorized access to their network. The incident may have involved files containing personal information, including full names. The agency is offering complimentary credit monitoring ser...
DBM Global, Inc. experienced a data security incident in November 2024, where an unknown actor acquired certain personal information without authorization. The incident was discovered on November 20, 2024, and DBM Global undertook a comprehensive review of the potentially impacted data. The company...
T-Mobile was hit by Salt Typhoon, a Chinese cyber-espionage group targeting US and global telecom firms
Helldown ransomware has expanded its reach to target Linux and VMware systems, exploiting Zyxel firewall vulnerabilities and exfiltrating data
AI-enabled code assistants (like GitHub’s Copilot, Continue.dev, and Tabby) are making software development faster and more productive. Unfortunately, these tools are often bad at Solidity. So we decided to improve them! To make it easier to write, edit, and understand Solidity with AI-enabled tools...
Palo Alto advised users to patch urgently as the vulnerability is critical and actively exploited in the wild
Ransomware groups are recruiting pen testers from the dark web to expand their operations, as revealed by Cato Network's Q3 2024 SASE Threat Report
Le conseil des parcs et des loisirs de Minneapolis a été victime d'une cyberattaque le 19 novembre, qui a mis hors service ses lignes téléphoniques. Le public est invité à appeler le 911 en cas d'urgence et à consulter le site web du conseil pour obtenir des informations sur les parcs et les service...
A Russian national suspected of involvement in Phobos ransomware has appeared in court in the US