> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several critical issues. Apple has introduced new security measures to protect camera and microphone data on its devices, enhancing user privacy. Meanwhile, the U.S. CISA has added vulnerabilities related to Check Point and UnrealIRCd to its Known Exploited Vulnerabilities catalog, signaling ongoing risks in these technologies. TSMC has confirmed a data breach affecting employee data, with attackers demanding Bitcoin for the stolen records. Additionally, concerns grow over the effectiveness of big tech companies in ensuring online safety, as experts criticize their minimal efforts to combat accessible banned content. Lastly, a recent incident involving Check Point gateways illustrates how attackers can exploit firewalls, turning them against their intended users.
|
// AI-powered summary generated at 12:00
Meta has agreed a $1.4bn settlement with the State of Texas for failing to inform Facebook users about its biometric data capturing practices
According to Fortinet, PyPI package Zlibxjson steals Discord tokens and browser data, including passwords and extensive user information
More comprehensive scans. More vulnerabilities identified. More time saved. Enhance your API scanning with Burp Suite. As web portfolios have diversified, APIs have become an increasingly critical fun
A global outage of Microsoft services was triggered by a DDoS attack, with an error Microsoft’s DDoS protection measures amplifying the impact
IBM reveals a 10% increase in the global cost of a data breach to $4.9m
Une cyberattaque suspectée a touché C-Edge Technologies, ce qui a perturbé les paiements de détail de UPI (Unified Payments Interface). Cette attaque a entraîné des problèmes pour les utilisateurs qui tentent d'effectuer des transactions en ligne. Les détails de l'incident ne sont pas encore clairs,...
Zscaler warns of copycat attacks after revealing one ransomware victim paid $75m
Les journaux La Notizia, La Provincia di Cremona e Crema, La Sicilia, ou encore Il Notiziario sont actuellement indisponible en édition digitale en raison d'une cyberattaque touchant la société qui héberge et diffuse leurs éditions numériques. Le serveur touché a été isolé et fait l'objet d'une opér...
La Insurance Company of the West Indies (ICWI) a été victime d'une cyberattaque en juillet, qui a pu entraîner une violation de données. L'enquête est toujours en cours, mais la société a pris des mesures pour contenir la situation et sécuriser son environnement. Les clients sont avertis de rester v...
Microsoft’s Copilot Studio is a powerful, easy-to-use, low-code platform that enables employees in an organization to create chatbots. Previously known as Power Virtual Agents, it has been updated (including GenAI features) and rebranded to Copilot Studio, likely to align with current AI trends.
Thi...
Fin juillet 2024, MAMH a découvert une cyberattaque contre ses systèmes et a fait appel à un consultant en cybersécurité pour enquêter sur l'incident. L'enquête a révélé que l'attaquant avait accédé aux systèmes de MAMH entre février et juin 2024, et a potentiellement pu accéder à des informations p...
The OneDrive campaign uses social engineering to trick users into executing a PowerShell script
According to eSentire, around 400 GenAI account logins are sold daily on the dark web, including credentials for GPT, Quillbot, Notion and Replit
This is a joint post with the Homebrew maintainers; read their announcement here! Last summer, we performed an audit of Homebrew. Our audit’s scope included Homebrew/brew itself (home of the brew CLI), and three adjacent repositories responsible for various security-relevant aspects of Homebrew’s op...
The ICO found that the Electoral Commission did not have appropriate security measures in place, allowing hackers to access the personal details of 40 million UK voters
Picus Security claims just 12% of simulated attacks trigger an alert
Avoid AWS bill surprises by blocking known-expensive API calls with an SCP.
Guardio Labs found that attackers exploited a configuration setting in Proofpoint’s email protection service, allowing outbound messages to bypass email protections
Health savings specialist HealthEquity reveals over four million customers were impacted in a recent breach
L'Intendencia de Paysandú a subi une cyberattaque qui a chiffré toutes les informations, les bases de données et le système, nécessitant un redémarrage à zéro. Les services sont actuellement inaccessibles, y compris le courrier électronique, le système tributaire et le registre civil. Les pertes son...