> TODAY'S SUMMARY (13 articles)
Today's cybersecurity news highlights several critical developments. A nationwide U.S. aviation ground stop was linked to legacy communications equipment during upgrades, with no evidence of hacking found. The U.S. CISA has added high-severity vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog. The rise of AI in cybersecurity raises concerns about overreliance potentially stifling creativity and critical thinking in security teams. Additionally, AI tools are being utilized by unsophisticated attackers to enhance ransomware threats. A data breach at TSMC has resulted in the exposure of 46,000 employee records, with attackers demanding a ransom in Bitcoin. Overall, organizations must remain vigilant against evolving threats and the implications of emerging technologies.
|
// AI-powered summary generated at 16:00
DG3, un fournisseur spécialisé dans les services d’impression, de publipostage et de communication, a détecté vers le 19 mars 2024 une activité suspecte sur certains systèmes réseau, révélant un incident cybernétique. DG3 a immédiatement lancé une enquête avec des experts en criminalistique pour dét...
An unauthorized party acquired a limited number of electronic files from Traverse City Area Public Schools' computer systems, potentially containing personal information. The incident occurred on or about March 19, 2024, and was claimed by Medusa on April 14th.
Sandu Boris Diaconu was involved in conspiracy to commit access device and computer fraud
An unauthorized party acquired a limited number of electronic files from Traverse City Area Public Schools' computer systems, potentially containing personal information. The incident occurred on or about March 19, 2024, and was claimed by Medusa on April 14, 2024.
Sermo experienced a data security incident involving a ransomware event with the group Black Basta claiming responsibility. Unauthorized access to and acquisition of information from Sermo’s network environment took place between March 19, 2024, and April 10, 2024. The incident resulted in the expos...
The voluntary FCC program will allow smart device manufacturers to demonstrate to consumers that their product has met robust cybersecurity standards
Seven years into its ethical hacking program, the Pentagon received its 50,000th vulnerability report on March 15
Today, Trail of Bits is publishing Attacknet, a new tool that addresses the limitations of traditional runtime verification tools, built in collaboration with the Ethereum Foundation. Attacknet is intended to augment the EF’s current test methods by subjecting their execution and consensus clients t...
The flaws, identified by KTrust, enable attackers to bypass rate limits and brute force protection mechanisms
A Microsoft report found that 87% of UK organizations are either vulnerable or at high-risk of cyber-attacks, and urged investment in AI as a security tool
La Unimed Cuiabá a subi une cyberattaque dans la nuit du lundi 18 mars, entraînant une indisponibilité temporaire de son système informatisé pour la libération des demandes de soins médicaux. Malgré l'attaque, les données personnelles et sensibles n'ont pas été compromises, et aucun soin n'a été int...
Scottish NHS trust reveals patient and staff data may have been taken in security breach
The International Monetary Fund says it is still looking into a recent compromise of multiple email accounts
Le comté de Henry en Illinois a été victime d'une cyberattaque par ransomware le 18 mars, affectant plusieurs de ses systèmes, mais les services d'urgence comme le 911 restent opérationnels. Le groupe de ransomware Medusa a revendiqué l'attaque et exige une rançon de 500 000 dollars, avec un histori...
La ville de Pensacola a subi une cyberattaque potentielle pendant le week-end, affectant son système téléphonique non urgent, mais sans impacter les services d'urgence comme la police et les pompiers. Les autres départements essentiels, tels que le port et l'aéroport international de Pensacola, fonc...
Vulnerability data has stopped being added to the most widely used software vulnerability database for over a month, putting organizations at risk – and nobody knows why
La South China Athletic Association a été victime d'une cyberattaque le dimanche 17 mars, entraînant une possible compromission des données personnelles de quelque 70 000 individus, incluant noms, dates de naissance, numéros d'identification et adresses. L'association a réagi en fermant les équipeme...
L'infrastructure informatique de Polycab a été ciblée par une attaque de ransomware le 17 mars 2024, mais l'entreprise a déclaré que ses systèmes principaux et ses opérations n'ont pas été affectés. Les systèmes de l'entreprise fonctionnent actuellement normalement, toutes les usines sont opérationn...
An AppOmni researcher detailed a misconfiguration in the HSE COVID Vaccination Portal, exposing the health and personal data of over a million Irish citizens
Le district scolaire de Whitko Community Schools a subi une panne de son système informatique en mars 2024, initialement attribuée à un problème de alimentation électrique, mais finalement identifiée comme une attaque de ransomware. Aucune preuve de vol de données sensibles n'a été trouvée et le dis...