> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
Une cyberattaque a frappé le système de suivi des livraisons de DHL, rendant impossible la mise à jour des statuts de livraison pour les détaillants Nisa. La société de technologie des transports Microlise, qui fournit le système de suivi à DHL, est considérée comme la cible de l'attaque. Les détail...
La ville de Sheboygan, dans le Wisconsin, a subi une faille de sécurité informatique le 31 octobre 2024, qui a entraîné une interruption de son réseau. Une enquête a révélé que des données personnelles, notamment des noms, des dates de naissance, des numéros de sécurité sociale et des numéros de per...
The LiteSpeed Cache vulnerability allows administrator-level access, risking security for over 6 million WordPress sites
Gleason, Flynn, Emig et McAfee, Chartered, ont découvert une activité suspecte sur leurs systèmes informatiques le 31 octobre 2024. Une enquête a révélé que des fichiers contenant des informations personnelles, notamment des numéros de sécurité sociale et des numéros de compte financier, ont pu être...
Maatuka Al-Heeti Emkes LLC experienced a network disruption that led to unauthorized access to certain information stored on their network. The incident occurred on October 31, 2024, and affected information included first and last names in combination with other data. The organization has taken ste...
The new FakeCall variant uses advanced vishing tactics, featuring Bluetooth for device monitoring
In a major security update, Apple has fixed dozens of bugs and vulnerabilities across its operating systems and services
Manage your security, your way. Managing a complex, enterprise-level web estate requires robust compliance, streamlined management of audits, and visibility of your security coverage. In other words -
CISA’s 2025-2026 International Strategic Plan aims to strengthen external partnerships to reduce risks to critical infrastructure relied on in the US
Comparitech warns that voters could be misled as most local government sites are failing on basic security
Le tribunal supérieur du comté de San Joaquin en Californie a été victime d'une cyberattaque qui a mis hors ligne la plupart de ses services numériques, notamment les services téléphoniques et de paiement par carte de crédit. Les experts en cybersécurité ont été embauchés pour aider à résoudre l'inc...
Microsoft has spotted a major spearphishing campaign from the Russian APT29 group using RDP for compromise
En octobre 2024, Southern Arkansas University Tech (SAU Tech) a détecté une activité suspecte sur ses systèmes informatiques, révélant qu’un utilisateur non autorisé avait accédé aux données et potentiellement copié des fichiers contenant des informations personnelles. L’université a immédiatement l...
On October 30, 2024, Parkleigh Enterprises discovered that an unauthorized third party had accessed or exfiltrated personal information following detection of suspicious activity. The company engaged law enforcement, security experts, and outside counsel to investigate and contain the incident. The...
ThreatFabric researchers have discovered significant updates to the LightSpy spyware, featuring plugins designed to interfere with device functionality
Carlsbad Municipal Schools a subi une attaque informatique le 30 octobre, ce qui a perturbé les téléphones et l'internet avant une restauration progressive en début novembre. Les parents ont exprimé leur frustration face au manque de transparence de la part du district scolaire. Les causes de la per...
The phishing campaign targeted users via texts impersonating Amazon, linked to the threat actor Chenlun
Operation Magnus took down infrastructure used to run the Redline and Meta infostealers, widely used tools in cybercriminal activities
This post offers a deep dive into Google Cloud’s default service accounts, explaining their functionality, risks, and real-world adoption trends.
A Veeam report found that businesses are prioritizing NIS2 compliance, with 95% of applicable firms diverting funds from other areas of the business