> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
Birdair, Inc. experienced a network disruption on October 28, 2024, and discovered unauthorized access to certain files. The investigation revealed that personal information of Maine residents was contained within the affected files. Birdair notified 4 Maine residents of the incident via first-class...
La mairie du district 5 de Bucarest a été victime d'une attaque par rançongiciel, les hackers réclamant 5 millions de dollars en échange de la restauration des données. Le maire, Cristian Popescu Piedone, a refusé de payer la rançon et a promis de mettre en place de nouvelles mesures de sécurité pou...
Updated figures from the HHS revealed that 100 million patients have been notified that their data was breached in the Change Healthcare ransomware attack
Le district scolaire de Marysville aux États-Unis a été victime d'une cyberattaque qui a entraîné l'annulation des cours le lundi. L'incident a affecté les systèmes de technologie du district, qui a immédiatement mis en œuvre son plan de réponse aux incidents et a fait appel à des experts en sécurit...
On October 26, 2024, Gemini Industries, Inc. detected suspicious activity in its network and determined that unauthorized actors had accessed its systems between October 15 and November 14, 2024, extracting certain files. A forensic investigation and comprehensive file review confirmed that personal...
If you love exploit mitigations, you may have heard of a new system call named mseal landing into the Linux kernel’s 6.10 release, providing a protection called “memory sealing.” Beyond notes from the authors, very little information about this mitigation exists. In this blog post, we’ll explain wha...
CERT-UA said the phishing campaign lures victims into downloading malware used to exfiltrate files containing sensitive personal data
LinkedIn violated the EU’s GDPR in how it processes its users personal data for behavioral purposes
A few days ago, Anthropic released Claude Computer Use, which is a model + code that allows Claude to control a computer. It takes screenshots to make decisions, can run bash commands and so forth.
It’s cool, but obviously very dangerous because of prompt injection. Claude Computer Use enables AI to...
A new ISACA study reveals that pay inequity and a lack of female leadership are significant issues noted by women in the digital trust sector
An unidentified threat actor has attempted to develop ransomware targeting macOS devices, posing as LockBit
L'Université ouverte hellénique (EAP) a subi une cyberattaque majeure le 25 octobre 2024, entraînant la fuite de 813 Go de données personnelles sensibles sur le dark web. L'attaque par ransomware a exploité des informations d'identification spécifiques pour infiltrer les systèmes IT et de sauvegarde...
Lazarus Group exploited Google Chrome zero-day, infecting systems with Manuscrypt malware
Penn State will pay $1.25m for failing federal cybersecurity standards in DoD and NASA contracts
Analysis of three npm packages containing malware linked to Democratic People's Republic of Korea and Contagious Interview
The National Security Memorandum on AI sets out actions for the federal government to ensure the safe, secure and trustworthy development of AI
This high-severity flaw, dubbed FortiJump by security researcher Kevin Beaumont, has been added to CISA’s KEV catalog
Une cyberattaque a visé l'entreprise Idea à Wetzlar, en Allemagne. Les hackers demandent une rançon en échange de la restitution des données volées. Les détails de l'attaque et de la demande de rançon ne sont pas précisés dans l'article.
The Data (Use and Access) Bill governs digital verification services and the use of personal data in public services, and will revamp the Information Commissioner’s Office
A new ISACA study has revealed that cybersecurity professionals are often overlooked in the development of AI policies