> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
North Korean groups exploited npm packages in coordinated attacks, targeting developers and cryptocurrency wallet browser extensions
BlackByte, linked to the Conti group, exploited VMware ESXi CVE-2024-37085 to control virtual machines
Le Real Hospital Português de Recife au Brésil a été victime d'une cyberattaque majeure qui a paralysé son système de communication, y compris sa réseau interne, les téléphones et les services numériques. Les hackers exigent une rançon en échange de la cessation de leurs activités. Cet incident soul...
Threat actors are exploiting a vulnerability found in CCTV cameras used in critical infrastructure to spread a Mirai malware variant
Chainalysis report reveals a likely increase in new internet scams this year as fraudsters adapt to increasing enforcement efforts
Conformément au Règlement 30 de la Securities and Exchange Board of India, la société informe qu'un incident de cybersécurité a eu lieu le 28 août 2024, ciblant son infrastructure informatique par une attaque par ransomware. L'équipe technique de l'entreprise, assistée par des experts externes en cy...
CISA and the FBI warned that Iranian APT group, Fox Kitten, has helped ransomware groups to attack US organizations since 2017
A virtual machine specialist was arrested after a foiled data extortion plot targeting his former employer
L'organisation à but non lucratif Planned Parenthood a confirmé avoir été victime d'une cyberattaque qui a affecté ses systèmes informatiques, obligeant l'organisation à prendre certaines parties de son infrastructure en ligne pour contenir les dégâts. Le groupe de ransomware RansomHub a revendiqué...
Ransomware attacks on US schools and colleges have surged, with 491 incidents since 2018, affecting over 8000 institutions
LummaC2, a C-based MaaS tool first identified in 2022, has resurfaced to exfiltrate credentials and personal data
Today we’re going to provision some cloud infrastructure the Max Power way: by combining automation with unchecked AI output. Unfortunately, this method produces cloud infrastructure code that 1) works and 2) has terrible security properties. In a nutshell, AI-based tools like Claude and ChatGPT rea...
The hacking subsidiary of the Iranian Islamic Revolutionary Guard Corps (RGC) has targeted satellite, communications, oil and gas and government sectors in the US and UAE
KPMG research finds money laundering accounted for the majority of fraud cases heard in the first half of 2024
Performing a root cause analysis & building proof-of-concept for CVE-2024-38063, a CVSS 9.8 Vulnerability In the Windows Kernel IPv6 Parser
ESET uncovers a South Korean cyber-espionage campaign featuring a zero-day exploit for WPS Office
The flaw in Microsoft 365 Copilot allowed data theft using ASCII smuggling and prompt injection
This post describes vulnerability in Microsoft 365 Copilot that allowed the theft of a user’s emails and other personal information. This vulnerability warrants a deep dive, because it combines a variety of novel attack techniques that are not even two years old.
I initially disclosed parts of this...
The Texas Dow Employees Credit Union told the Maine Attorney General the MOVEit data breach compromised information of over 500,000 members
A US Justice Department watchdog has found “significant weaknesses” in the FBI’s physical and online media storage and disposal processes