> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
The FBI and CISA detected that hackers linked to the Russian foreign intelligence service (SVR) have been targeting a JetBrains TeamCity vulnerability since September 2023
We’re thrilled to announce that Trail of Bits will be competing in DARPA’s upcoming AI Cyber Challenge (AIxCC)! DARPA is challenging competitors to develop novel, fully automated AI-driven systems capable of securing the critical software that underpins the modern world. We’ve formed a team of world...
Romance scammers have used the technique to great effect in recent years
More ransomware attacks now start with vulnerability exploitation than phishing, says Corvus Insurance
Max Groot & Erik Schamper TL;DR Introduction During incident response engagements we often encounter antivirus applications that have rightfully triggered on malicious software that was deployed by threat actors. Most commonly we encounter this for Windows Defender, the antivirus solution that i...
Group-IB warns of new threat actor GambleForce, which uses SQL injection attacks to steal data from websites
Microsoft disrupts Vietnam based threat group Storm-1152, which has sold 750 million fake accounts
Max Groot & Erik Schamper TL;DR Introduction During incident response engagements we often encounter antivirus applications that have rightfully triggered on malicious software that was deployed by threat actors. Most commonly we encounter this for Windows Defender, the antivirus solution that i...
Max Groot & Erik Schamper TL;DR Introduction During incident response engagements we often encounter antivirus applications that have rightfully triggered on malicious software that was deployed by threat actors. Most commonly we encounter this for Windows Defender, the antivirus solution that i...
La société Verocard, qui gère les tickets alimentation pour les employés de la mairie de Brumadinho, a été victime d'une cyberattaque le 14 décembre, entraînant l'indisponibilité de ses services dans plusieurs villes. Les utilisateurs ont été conseillés d'éviter toute transaction avec leurs cartes j...
La plateforme Restoconnect, utilisée pour la réservation des repas dans les cantines scolaires de Nîmes, est inaccessible depuis le 14 décembre à la suite d'une cyberattaque contre Dupont Restauration, le gestionnaire du service. Aucune donnée personnelle n'a été compromise, mais l'incident a entraî...
MITRE’s EMB3D provides industrial manufacturers with a shared understanding to mitigate cyber threats
Russian cyber campaigns aim to disrupt Western allies’ ability and motivation to support Ukraine’s war effort
When OpenAI released GPTs last month I had plans for an interesting GPT.
Malicious ChatGPT Agents The idea was to create a kind of malware GPT that forwards users’ chat messages to a third party server. It also asks users for personal information like emails and passwords.
Why would this be possible...
A UK parliament report found that large swathes of critical national infrastructure are vulnerable to ransomware
Microsoft has released updates for dozens of vulnerabilities including one zero-day flaw
Le 4 décembre 2023, Apache a publié un avis de sécurité concernant la vulnérabilité critique CVE-2023-50164 concernant le cadriciel Struts 2. Cette vulnérabilité permet à un attaquant non authentifié de téléverser une porte dérobée sur un serveur vulnérable, et ainsi exécuter du code arbitraire à ...
The ICO has fined the Ministry of Defence after an email data breach put lives in danger
Ukrainian Ministry of Defense says cyber-attack wiped Russian tax system servers
Une cyberattaque a touché Limburg.net, entraînant la fermeture du parc de recyclage non surveillé de Kortessem. Les autres parcs de recyclage gérés par Limburg.net restent ouverts, mais doivent fonctionner hors ligne, ce qui provoque des désagréments, car les usagers ne peuvent plus s'enregistrer nu...