> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
La Calgary Public Library a fermé ses portes en raison d'une cyberattaque qui a compromis certains systèmes, obligeant la fermeture de toutes les bibliothèques physiques et la mise hors ligne de tous les serveurs et accès informatiques. L'incident a également affecté le festival Imaginairium, qui a...
La société finlandaise Polar, fabricant de montres connectées, a été victime d'une cyberattaque qui a compromis les informations de commande de certains clients de son magasin en ligne aux États-Unis. Les attaquants ont tenté d'effectuer des achats frauduleux en utilisant les comptes compromis et on...
Operation MiddleFloor targets Moldova’s October elections, spreading EU disinformation via email
BayMark Health Services, le plus grand fournisseur de services de traitement des troubles de l'usage de substances en Amérique du Nord, a notifié ses patients d'une violation de données qui a exposé des informations personnelles et de santé, notamment des numéros de sécurité sociale et des informati...
Legacy Treatment Services, Inc. experienced a cybersecurity incident that impacted connectivity to their network, potentially exposing personal data of those served by both Legacy and Community Treatment Solutions between October 6, 2024, and October 11, 2024. The attack was claimed under the Interl...
This is a joint post with the Hugging Face Gradio team; read their announcement here! You can find the full report with all of the detailed findings from our security audit of Gradio 5 here. Hugging Face hired Trail of Bits to audit Gradio 5, a popular open-source library that provides a web interfa...
The data breach exposed more than 10m customer conversations from an AI call center platform in the Middle East
The EU's Cyber Resilience Act requires cybersecurity standards for all connected products throughout their entire lifecycle
L'Agence pour la Modernisation Administrative (AMA) du Portugal a été victime d'une cyberattaque par ransomware, rendant son réseau informatique inaccessible au public. L'attaque a eu un impact significatif sur plusieurs services, notamment Authentication.Gov, Gov.ID et CERT.PT. L'AMA travaille avec...
Marriott will pay $52m to 50 US states for a data breach impacting 131.5 million American customers, and has agreed to implement stronger security practices
The non-profit digital library was also hit by at least two DDoS attacks in two days
La mairie de Guajará-Mirim au Brésil a été victime d'une cyberattaque qui a entraîné le vol de données. L'équipe technique de la mairie travaille actuellement pour récupérer le contrôle des systèmes et garantir la sécurité des informations. Les autorités locales ont promis de tenir la population inf...
Two former RAC employees have been handed suspended prison sentences for trading in personal data
Supply chain victim numbers surge as more than 240 million US residents are impacted by data breaches in Q3 2024
Une plainte fédérale accuse Visionworks of America Inc., basée à San Antonio, de ne pas avoir informé 40 000 clients d'une cyberattaque ayant exposé leurs données personnelles le 10 octobre 2024. Le plaignant, un client de l'Arizona, reproche à l'entreprise sa négligence dans la protection des donné...
De multiples vulnérabilités ont été découvertes dans Mitel Micollab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
The privacy flaw in Apple’s iPhone mirroring feature enables personal apps on an iPhone to be listed in a company’s software inventory when the feature is used on work computers
New BeaverTail malware targets tech job seekers via fake recruiters on LinkedIn and X
This post explores the risks and challenges of IP spoofing in cloud environments, particularly in setups using reverse proxies. It outlines various mitigation strategies to ensure accurate client IP identification for security purposes.
Barracuda researchers have identified a new wave of QR code phishing attacks that evade traditional security measures and pose a significant threat to email security