> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
Comparitech revealed crypto heists increased in volume by 42% last year
Ollie Whitehouse, the NCSC’s new Chief Technology Officer, outlines the cyber security challenges he’ll be prioritising.
Volexity detects 1700 compromised Ivanti VPN devices following publication of two zero-days last week
Group-IB report lifts the lid on infamous crypto-drainer malware Inferno Drainer
L'Université d'État du Kansas a subi une perturbation de certains de ses systèmes réseau, notamment le VPN, les e-mails K-State Today et les vidéos sur Canvas ou Mediasite, suite à un incident de cybersécurité survenu autour du mardi 16 janvier. Les systèmes affectés ont été déconnectés pour enquête...
Netscout found a spike from 10,000 to 143,957 devices in scans between December 2023 and early January 2024
US senators have accused the SEC of failing to properly secure its social media accounts after hackers comprised its X account and posted a fake Bitcoin announcement
Trail of Bits cares about internet freedom, and one of our most valued partners in pursuit of that goal is the Open Technology Fund (OTF). Our core values involve focusing on high-impact work, including work with a positive social impact. The OTF’s Red Team Lab […]
Discovered by the SentinelLabs team, FBot targets web servers, cloud services and SaaS platforms
Content delivery provider Cloudflare observed a staggering surge in DDoS attacks against environmental services during COP28
A few days ago Riley Goodside posted about an interesting discovery on how an LLM prompt injection can happen via invisible instructions in pasted text. This works by using a special set of Unicode code points from the Tags Unicode Block.
The proof-of-concept showed how a simple text contained invis...
The main British Library catalogue will be back online on Monday, January 15, as the institution continues its technical rebuild following the ransomware attack last year
A new Recorded Future report warns of growing abuse of GitHub and recommends blocking risky services
Le 15 janvier, la filiale de Foxconn spécialisée dans les équipements pour semi-conducteurs, Foxsemicon Integrated Technology Inc, a été victime d'une cyberattaque et les pirates informatiques ont demandé une rançon d'un million de dollars. Les pirates ont menacé de divulguer les données des clients...
The ICO has fined HelloFresh £140,000 for breaking privacy laws with a spam marketing campaign
Trois conseils du Kent, Canterbury City Council, Thanet District Council et Dover District Council, ont subi des perturbations de services suite à un incident cybernétique qui pourrait être une attaque de piratage organisée. Les autorités locales collaborent avec les experts du National Cyber Securi...
Le cabinet d'avocats Constangy Brooks Smith & Prophete LLP a informé l'Attorney General du Maine, Aaron Frey, d'une faille de sécurité chez son client, Hardin, Kundla, McKeon & Poletto P.C. Cette faille a pu permettre l'accès non autorisé à des informations personnelles, notamment des noms, des date...
Australian Retailer Ransomware Breach, 15 January 2024: Qilin ransomware gang has shared 37.6 gigabytes of data belonging to Victorian print music company Hal Leonard Australia. Hal Leonard given a week to pay an undisclosed sum of money for ransom.
The post Incident: Victorian print music giant Hal...
La bibliothèque du comté de Douglas a été victime d'une cyberattaque par un groupe criminel international nommé "Playcrypt", soupçonné d'avoir des liens avec la Russie. Le système de la bibliothèque a été paralysé, affectant le catalogue en ligne et les services de prêt, mais aucune information pers...
Sambr'Habitat, une société de logements publics située à Sambreville et Jemeppe-sur-Sambre, est contrainte de fonctionner au ralenti à la suite d'une cyberattaque. Les détails de l'attaque et son impact exact sur les opérations de l'entreprise ne sont pas entièrement divulgués dans le texte accessib...