> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
La société australienne Funlab, propriétaire de Strike Bowling et d'autres lieux de divertissement, a confirmé avoir été victime d'une attaque par rançongiciel (ransomware) du groupe Lynx, qui a exfiltré des données sensibles, notamment des informations sur les employés. Selon Funlab, aucune donnée...
Amber Beverage Group (ABG) a annoncé avoir été victime d’une cyberattaque. L’entreprise a pris des mesures pour atténuer les impacts et a informé les autorités compétentes, notamment la police d'État, CERT.LV et l'Inspection des données. Une enquête criminelle est en cours, avec une coopération tota...
Infostealer malware and digital identity exposure behind rise in ransomware, researchers find
Dignity Health Lassen Medical Clinic a informé 65 482 patients en Californie que certaines de leurs informations médicales protégées ont été exposées ou volées lors d'une cyberattaque détectée le 20 septembre 2024. Les fichiers compromis incluent des données telles que noms, adresses, dates de naiss...
Cyber and law enforcement agencies across the “Five Eyes” countries issue warning about large-scale botnet linked to Chinese firm and Flax Typhoon group
At Trail of Bits, we aim to share and develop tools and resources used in our security assessments with the broader security community. Many clients, we observed, don’t use Semgrep to its fullest potential or even at all. To bridge this gap and encourage broader adoption, our CEO, Dan Guido, initiat...
A Manchester law firm has filed a lawsuit against outsourcing giant Capita, representing nearly 8000 claimants who were affected by a cyber-attack in 2023
US Schools and libraries have until November 1, 2024 to enrol for a three-year program during which participants will receive discounts on eligible cybersecurity services and equipment
La mairie de Fernando Prestes a été victime d'une cyberattaque qui a compromis ses systèmes et a entraîné la suspension temporaire de nombreux services à la population. Les équipes de la mairie travaillent à restaurer les systèmes et à rétablir la normalité le plus rapidement possible. Pendant ce te...
Group-IB claims to have found evidence of a new TeamTNT cryptojacking campaign
Thales claims API insecurity and automated bot abuse is costing organizations an estimated $186bn annually
Le 18 septembre 2024, Ishimitsu & Co., Ltd., ainsi que ses filiales japonaises, ont été touchées par une attaque avec ransomware qui a rendu leurs serveurs inaccessibles en chiffrant leurs données. La société collabore avec des experts pour évaluer l'étendue des dommages et restaurer les systèmes. L...
Critical infrastructure security undermined by weakness in email protection, researchers warn
Attackers use Google Street View images to put pressure on victims of “sextortion” scams
Le Musée des beaux-arts de l'Ontario (AGO) a été victime d'une cyberattaque en septembre, lors de laquelle un tiers non autorisé a accédé à son serveur partagé interne, potentiellement exposant les adresses e-mail de ses clients. Les informations de carte de crédit et la plupart des données client n...
The suspected creator of Ghost, an encrypted communication platform allegedly used by organized crime groups worldwide, has been arrested
Telco giant AT&T will pay the FCC $13m to resolve a cloud breach investigation
At DEF CON, Michael Brown, Principal Security Engineer at Trail of Bits, sat down with Michael Novinson from Information Security Media Group (ISMG) to discuss four critical areas where AI/ML is revolutionizing security. Here’s what they covered: AI/ML techniques surpass the limits of traditional so...
The US Cybersecurity and Infrastructure Security Agency is trying to eradicate cross-site scripting vulnerabilities
CISA project will align cybersecurity polices across the Federal Civilian Executive Branch of US government