> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
Articles
Azure AD users get an “MFA Did Not Authorize” error message when they log in
Gateway Wireless Controller AP upgrade steps for Fireware 12.0 and lower to Fireware 12.0.1 and higher
macOS Sonoma 14.x software compatibility
Uninstall a TDR Host Sensor with tamper prevention enabled
WatchGuard...
ThreatFabric found evidence that LighSpy is linked to Android spyware DragonEgg, attributed to the Chinese-sponsored group
Menlo Labs brought this discovery to light in an advisory published on Tuesday
Les entreprises municipales allemandes Hochsauerlandenergie et Hochsauerlandwasser ont été victimes d'une cyberattaque début octobre, qui a entraîné la suspension de leurs services. Les systèmes sont désormais rétablis et presque tous les services sont de nouveau disponibles pour les clients. Les en...
The BADBOX scheme deploys the Triada malware on various devices like smartphones and tablets
Organizations urged to update staff awareness programs
Le 4 décembre 2023, Neurosurgical Associates of New Jersey a signalé une violation de données après qu'un pirate ait accédé à un compte de messagerie d'employé, exposant des informations sensibles de patients telles que noms, adresses, numéros de sécurité sociale, informations d'assurance santé, dos...
Chip giants have released updates to fix the vulnerabilities
Non-profit warns of blurring between military and civilian attacks
Australian Real Estate Ransomware Attack, 04 October 2023: Ransomware gang posts 30GB of data it claims belongs to Victorian real estate group. Ragnar Locker gang is claiming to have breached Network Pacific Real Estate following a failure in negotiations.
The post Incident: Ransomware gang posts 3...
NSA Director Gen. Nakasone made the announcement during a discussion in Washington last Thursday
Fortinet said these packages can be categorized into nine sets based on their code and functions
Le système de transport Metro à St. Louis a subi une cyberattaque qui a perturbé certains de ses services, notamment le service paratransit Call-A-Ride. L'équipe informatique de Metro a réussi à contenir la brèche et à protéger les informations des clients, aucune donnée client n'a été compromise. B...
The open letter, signed by 50 leading cybersecurity figures, urges the EU to reconsider its proposals around vulnerability disclosure requirements
Cybersecurity firm Sekoia has found new evidence that the Malagasy government has used Cytrox’s spyware ahead of the election
Le 27 septembre 2023, Zero Day Initiative (ZDI) a publié six avis de sécurité \[1\] concernant des vulnérabilités de type zéro-jour affectant les versions antérieures à 4.96.1 ou 4.97 de l'agent de transfert de courriels (*Mail Transfer Agent* ou *MTA*) Exim. Le 1er octobre 2023, l'éditeur a...
Sonatype detects over 245,000 malicious packages
New research by ISACA has found that the cybersecurity skills gap is contributing to businesses' cybersecurity preparedness
Estes Express Lines, une entreprise de transport basée à Richmond, en Virginie, a confirmé avoir été victime d'une cyberattaque qui a perturbé son infrastructure principale et plusieurs de ses systèmes. Malgré l'attaque, l'entreprise continue d'assurer la collecte et la livraison de marchandises. L'...
Government funding will help more sixth-form students get into cyber