> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
ITRC data finds 69% have suffered multiple identity crimes
Many security-critical off-chain applications use a simple block delay to determine finality: the point at which a transaction becomes immutable in a blockchain’s ledger (and is impossible to “undo” without extreme economic cost). But this is inadequate for most networks, and can become a single poi...
Credit reporting firm accused of sending millions of unwanted emails
Researchers find four vulnerabilities in popular model
Today, I published the following diary on isc.sans.edu: “More Exotic Excel Files Dropping AgentTesla”: Excel is an excellent target for attackers. The Microsoft Office suite is installed on millions of computers, and people trust these files. If we have the classic xls, xls, xlsm file extensions, Ex...
Australian Telemarketer Breach, 23 August 2023: Pareto Phone, a Brisbane-based telemarketing company that contacts potential donors on behalf of charities, was hacked by cybercriminals in April. 70 charities, including Amnesty International Australia, Australian Conservation Foundation, Wilderness S...
La Haute École de Lucerne (HSLU) a été victime d'une attaque de ransomware ciblant une de ses environnements informatiques spécifiques, séparée des services IT centraux. Cette attaque n'a pas affecté le fonctionnement général de l'école car elle a visé principalement le département informatique. Les...
L'entreprise Heuschen & Schrouff, basée à Landgraaf et spécialisée dans la vente en gros de produits alimentaires asiatiques, a été victime d'une cyberattaque paralysant tous ses systèmes. Selon des sources de la chaîne provinciale L1, les pirates informatiques exigeraient une rançon sous forme de p...
The research also highlights a shift in hacker tactics toward exploiting network server flaws
Le Dakota Eye Institute a également rapporté une brèche de données touchant 107 143 patients, sans préciser la nature de l'incident mais a renforcé ses politiques de sécurité des données en réponse.
ESET's investigation also revealed that certain Spacecolon versions contain Turkish strings
DIGIHEALS will call for proposals for technologies originally designed for national security
Today, I published the following diary on isc.sans.edu: “Have You Ever Heard of the Fernet Encryption Algorithm?“: In cryptography, there is a gold rule that states to not develop your own algorithm because… it will be probably weak and broken! They are strong algorithms (like AES) that do a great j...
NCC Group researchers observed 502 ransomware attacks in July 2023, with a large proportion made up of Clop’s exploitation of MOVEit
Australian utility company Energy One confirmed it had taken steps to limit a cyber-attack affecting its corporate systems
Je suis désolé, mais l'extrait que vous avez fourni ne contient pas d'informations sur une cyberattaque à la Stadtbibliothek Weißwasser. Il semble plutôt être lié aux conditions d'un abonnement, probablement pour un service en ligne. Pourriez-vous fournir un extrait de l'article qui parle spécifique...
Legitimate software used to deploy backdoor malware
Latest vulnerability affects Ivanti Sentry
Leaseweb, un fournisseur d'hébergement, semble avoir été touché par une cyberattaque, causant des problèmes à ATPS Online, une entreprise qui fournit une solution de gestion du temps via un modèle SaaS. ATPS Online a déclaré qu'ils ont réussi à accéder à certains de leurs systèmes clés, y compris le...
Two former employees shared information with German newspaper