> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
La municipalité de Canterbury enquête sur un incident de cybersécurité avec l'aide du National Cyber Security Centre. Bien que le système de messagerie et le site web soient restés accessibles, certaines fonctionnalités du site pourraient être affectées, et il n'y a pas d'indication que les données...
Proofpoint said it thwarted a large-scale campaign on January 11 primarily targeting North America
Discovered by Cado Security, the campaign deploys two containers to vulnerable Docker instances
Late last month, DARPA officially opened registration for their AI Cyber Challenge (AIxCC). As part of the festivities, DARPA also released some highly anticipated information about the competition: a request for comments (RFC) that contained a sample challenge problem and the scoring methodology. P...
Microsoft said the social engineering campaign aims to steal sensitive data from experts deemed to be able to influence intelligence and policies relating to the Israel-Hamas War
Chainalysis data shows major drop in value of funds received into underground crypto addresses in 2023, to $24.2bn
A few weeks ago Amazon released the Preview of Amazon Q for Business, and after looking at it I found a data exfiltration angle via rendering markdown/hyperlinks and reported it to Amazon.
Amazon reacted quickly and mitigated the problem. This post shares further details and how it was fixed.
The Pr...
The UK’s National Cyber Security Centre has launched a Cyber League to monitor emerging cyber-threats
Australian Medical Centre Breach, 18 January a2024: Patient data hacked at Crace Medical Centre in Canberra. Crace has not disclosed any details about the attack nor the number of affected individuals.
The post Incident: Patient data hacked at Crace Medical Centre in Canberra appeared first on Austr...
La SEIU Local 1000, l'une des plus grandes unions de Californie, a confirmé être victime d'une cyberattaque après que le groupe de ransomware LockBit ait prétendu avoir volé 308 gigaoctets de données sensibles de l'organisation. L'union travaille avec des experts externes pour sécuriser son réseau e...
Le 18 janvier 2024, le système de données de la Croix-Rouge italienne a été victime d'une cyberattaque, entraînant le vol de données personnelles de plus de 16 500 personnes, notamment des personnes disparues et leurs familles. Les données volées incluent des informations sur les personnes qui ont d...
Kaspersky also noted smart home device popularity and malicious apps as threats to children in 2024
Abnormal Security also noted a 71% surge in BEC attacks against the same sector
We are publishing a set of 30 custom Semgrep rules for Ansible playbooks, Java/Kotlin code, shell scripts, and Docker Compose configuration files. These rules were created and used to audit for common security vulnerabilities in the listed technologies. This new release of our Semgrep rules joins ou...
OpenAI will implement a provenance standard into DALL-E 3 and link ChatGPT to an authoritative election website in the US
Veeam found that 75% of organizations suffered at least one ransomware attack last year, with 26% hit four or more times
La räddningstjänsten (service de secours) de la région de Jämtland en Suède a été la cible d'une cyberattaque dans la nuit de mercredi à jeudi, affectant leur système d'alerte. Le personnel a été alerté de l'incident après minuit grâce aux avertissements de leur système informatique. Actuellement, l...
An advisory from the FBI and CISA says threat actors are deploying the Androxgh0st malware for victim identification and exploitation in target networks
Municipality of CalviĂ on the Spanish island of Majorca was hit by a ransomware attack last weekend
La station de radio Donau 3 FM à Ulm a été victime d'une cyberattaque mercredi après-midi, entraînant la paralysie de ses ordinateurs. Face à cette situation, l'équipe a dû improviser en utilisant une table de mixage externe et des lecteurs de CD personnels pour continuer à diffuser son programme, p...