> TODAY'S SUMMARY (13 articles)
Today's cybersecurity news highlights several critical developments. A nationwide U.S. aviation ground stop was linked to legacy communications equipment during upgrades, with no evidence of hacking found. The U.S. CISA has added high-severity vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog. The rise of AI in cybersecurity raises concerns about overreliance potentially stifling creativity and critical thinking in security teams. Additionally, AI tools are being utilized by unsophisticated attackers to enhance ransomware threats. A data breach at TSMC has resulted in the exposure of 46,000 employee records, with attackers demanding a ransom in Bitcoin. Overall, organizations must remain vigilant against evolving threats and the implications of emerging technologies.
|
// AI-powered summary generated at 16:00
The White House Executive Order will give new powers to the US Coast Guard to manage cyber threats in ports and issue cybersecurity standards
Since emerging in May 2023, the group claims to have victimized 77 companies and public institutions
Le service d'immigration du Malawi a suspendu la délivrance des passeports à la suite d'une cyberattaque sur son système informatique, qualifiée de "grave atteinte à la sécurité nationale" par le président Lazarus Chakwera. Les pirates informatiques ont demandé une rançon, mais le gouvernement a ref...
Compromising valid identities became the top initial access vector in 2023 while phishing dropped to second place, IBM found in a new report
ESET researchers reveal a Russian threat actor has targeted Ukrainian citizens with PYSOPs messages warning of impacts such as food and medicine shortages from the war
Cencora Inc a révélé, le 27 février, avoir été victime d'une cyberattaque au cours de laquelle des données, potentiellement comprenant des informations personnelles, ont été dérobées de ses systèmes d'information. L'activité non autorisée a été détectée le 21 février et la société a immédiatement pr...
The UK’s National Cyber Security Centre has produced new guidance for smaller firms on PBX attacks
It now takes threat actors on average just 62 minutes to move laterally from initial access, Crowdstrike claims
Impac Mortgage Holdings, Inc. experienced a data breach where an unknown actor may have accessed certain files and folders containing protected information between February 21, 2024, and March 20, 2024. A cyberattack was claimed by Medusa on March 23, 2024.
ReversingLabs uncovered two suspicious packages on PyPI: NP6HelperHttptest and NP6HelperHttper
Cado Security said this campaign introduces unique techniques to compromise the security of Redis servers
Today we are disclosing a denial-of-service vulnerability that affects the Pedersen distributed key generation (DKG) phase of a number of threshold signature scheme implementations based on the Frost, DMZ21, GG20, and GG18 protocols. The vulnerability allows a single malicious participant to surrept...
The attack, which has been claimed by Anonymous Sudan, has been confirmed to have impacted IT services at the universities of Cambridge and Manchester
Arctic Wolf found that the median ransomware demand was $600,000 in 2023, a 20% rise on the previous year
La Berliner Hochschule für Technik (BHT) a été victime d'un "incident de sécurité", entraînant l'indisponibilité de son site web, de son système de messagerie électronique et de ses téléphones. Il est suggéré que l'attaque pourrait impliquer un ransomware qui chiffre les données et demande une ranço...
A former employee at Stratford-on-Avon District Council stole residents’ emails to promote his business
UK’s National Crime Agency has led an international operation to disrupt the LockBit ransomware group
Continental Aerospace, un fabricant de moteurs basé à Mobile en Alabama, est actuellement victime d'une cyberattaque qui perturbe ses opérations. L'entreprise a annoncé sur son site web le 20 février qu'elle travaillait avec des experts pour résoudre le problème et espère reprendre ses activités nor...
Change Healthcare, une importante entreprise technologique dans le secteur de la santé aux États-Unis, a confirmé avoir subi une cyberattaque entraînant une interruption de son réseau. L'incident a débuté tôt mardi matin sur la côte Est des États-Unis, et l'entreprise a pris des mesures immédiates p...
ThreatFabric said the campaign has evolved since last year, employing sophisticated methods and mainly targeting Samsung devices