> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
La mairie de Taubaté, dans l'État de São Paulo, au Brésil, a confirmé avoir subi une cyberattaque en août 2024, entraînant une fuite de données sensibles. La ville a notifié l'Autorité nationale de protection des données (ANPD) et a pris des mesures pour améliorer sa sécurité cibernetique, notamment...
The phishing attack uses infostealer malware to target saved passwords, credit cards & Bitcoin info
Manufacturing firm Orion revealed it has lost $60m in a business email compromise (BEC) scam, which targeted a non-executive employee
La ville de Flint, au Michigan, est victime d'une cyberattaque par rançongiciel qui a causé une panne de réseau, entraînant des perturbations dans les services publics. Les enquêteurs du FBI et du procureur général sont impliqués dans l'enquête, tandis que les experts en cybersécurité travaillent à ...
CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103
Firms are introducing 300 services monthly, contributing to 32% of high or critical cloud exposures
Le système de demande d'Isaac de l'Organisation néerlandaise pour la recherche scientifique (NWO) a été victime d'une cyberattaque, rendant le système inaccessible aux utilisateurs externes. Les délais pour les demandes ont été reportés en conséquence, notamment pour l'Open Competitie-XS qui est mai...
Tenable detailed two privilege escalation vulnerabilities in the Azure Health Bot Service, one of which has been rated critical
A cyber-attack has hit several boroughs across Greater Manchester, England, leaving thousands of residents vulnerable to a phishing scam
EmCentrix experienced a network disruption on August 14, 2024, which led to unauthorized access to certain files. An investigation revealed that some personal information was contained within the potentially affected data. The company has taken steps to enhance security and is offering complimentary...
The UK’s National Cyber Security Centre wants to test the effectiveness of cyber-deception tactics
Microsoft’s August Patch Tuesday saw the tech giant address nine zero-day vulnerabilities
If you don’t have the inhouse expertise to keep your organisation cyber secure, the NCSC offers services and tools to help organisations guard against commodity threats.
In a Monday filing with the ASX, Evolution Mining stated that the incident was contained
NIST has formalized three post-quantum cryptographic algorithms, with organizations urged to start the transition to quantum-secure encryption immediately
A fundamental design flaw within the RADIUS protocol has been proven to be exploitable, compromising the integrity in the RADIUS Access-Request process. The attack allows a malicious user to modify packets in a way that would be indistinguishable to a RADIUS client or server. To be successful, the a...
The EVIT breach exposed the data of 208,717 individuals, including students, faculty and parents
CERT-UA has warned that a mass phishing campaign impersonating Ukraine’s Security Services has infected more than 100 government devices
Le district scolaire indépendant de Gadsden au Nouveau Mexique a été victime d'une attaque de ransomware le 13 août, mais les données des étudiants et des employés n'ont pas été compromises. Les mesures de sécurité ont été prises immédiatement pour protéger les systèmes et limiter l'impact de l'atta...
Belarusian national Maksim Silnikau, who was operating under the ‘J.P. Morgan’ moniker, is believed to be one of the world’s most prolific Russian-speaking cybercriminals