> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Fortiguard Labs identified multiple threat actors leveraging CVE-2023-46604
Hunters’ Team Axon said the flaw could lead to the unauthorized access of emails in Gmail and more
Earlier this month I had the opportunity to present at Ekoparty 2023 about Prompt Injections in the Wild, and the video of the talk was just posted to YouTube. Check it out.
It starts with a basic overview of LLMs and then dives deep into exploits and mitigations across various LLM applications and...
New research has found that AI is significantly more accurate than traditional techniques at detecting malicious malware
Many are failing UK Finance’s new fraud quiz
Les systèmes informatiques de l'Azienda USL di Modena, de l'Azienda Ospedaliero-Universitaria di Modena et de l'Ospedale di Sassuolo Spa ont été attaqués par des hackers dans la nuit. L'attaque présente des similitudes avec celles survenues dans d'autres régions ces derniers mois.
Zero-day bug could allow remote control of servers
Critical vulnerability is being exploited in the wild
Les entreprises de transport Guyamier et Lacassagne en Gironde ont été gravement touchées par une cyberattaque le mercredi 29 novembre, entraînant la perte de l'accès à leurs fichiers clients, courriels et dossiers informatiques. Une cellule de crise a été mise en place pour tenter de maintenir l'ac...
La chaîne de magasins de sport Sprinter Sports, anciennement connue sous les noms Perry Sport et Aktiesport, a été victime d'une cyberattaque, au cours de laquelle les criminels ont accédé au système de commande et aux données de compte des clients. L'entreprise a mené une enquête approfondie avec d...
Australian Insider Threat, 29 November 2023: National Disability Insurance Agency NDIA data breach claimed to impact 11,000 "records". NDIA staffer charged with leaking participants' data, acting NDIA provider also arrested.
The post Incident: UPDATE NDIA data breach claimed to impact 11,000 “recor...
L'agence spatiale japonaise, JAXA, a été victime d'une cyberattaque, mais les informations compromises ne concernent pas les opérations importantes liées aux fusées et aux satellites. L'attaque a été découverte après un avertissement d'une organisation externe et une enquête interne, mais l'agence n...
Zimperium’s latest findings include the identification of 245 new app variants
Non-urgent procedures are being rescheduled, emergency room patients redirected to other hospitals
We have identified a new stack buffer overflow vulnerability in Mediatek’s Linux Kernel driver implementation of cellular-to-application processor communication interface (CCCI). The vulnerability can be exploited by a malicious (compromised) baseband runtime to achieve arbitrary code execution in t...
AI-powered tools are among the top fraud techniques used by threat actors in 2023, according to Sumsub’s third annual Identity Fraud Report
An analysis of dark web forums revealed many threat actors are skeptical about using tools like ChatGPT to launch attacks
We have identified a new heap buffer overflow vulnerability in Mediatek’s baseband implementation. The vulnerability can be exploited to achieve arbitrary code execution in the baseband runtime.
The vulnerability we are disclosing in this advisory affected a wide range of Mediatek devices, including...
Truecaller warns malicious calls make up the majority
Security agency wants to resume critical CFATS inspections