> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
La mairie de Calvia à Majorque a été victime d'une cyberattaque détectée tôt le samedi matin, ce qui a conduit à la formation d'un comité de crise incluant des spécialistes en informatique, des chefs de département et des conseillers municipaux. Une analyse judiciaire de l'attaque est en cours par l...
CISA’s advisory provides mitigations for vulnerabilities in ICS products used in critical infrastructure industries like energy, manufacturing and transportation
Semgrep, a static analysis tool for finding bugs and specific code patterns in more than 30 languages, is set apart by its ease of use, many built-in rules, and the ability to easily create custom rules. We consider it an essential automated tool for discovering security issues in a […]
Email security provider Cofense outlined some of the most common HR-related scams and phishing campaigns it has observed
Bitdefender researchers revealed the vulnerability allows an attacker to send commands to the thermostat and replace its firmware
\[Mise à jour du 29 janvier 2024\] Le 25 janvier 2024, l'éditeur a publié un avis de sécurité concernant plusieurs vulnérabilités affectant GitLab CE et EE. La vulnérabilité CVE-2024-0402 est considérée critique avec un score CVSSv3 de 9,9. Elle permet à un attaquant authentifié d'écrire des...
Millions in the UK have had their data compromised because of cyber incidents involving law firms, a recent analysis of IOC data has found
Fidelity National Financial revealed that the ransomware attack last year potentially impacted 1.3 million customers data in an updated SEC filing
Australian Travel Agency Breach, 11 January 2024: Melbourne travel agency Inspiring Vacations, exposes customer data after leaving database publicly accessible. The leaked data, includes passport images, travel visa certificates, travel itineraries, and partial credit card numbers.
The post Incident...
Mandiant has shared its findings following X account hijacking, firm blames misconfigured 2FA and X's policy change
The UK’s National Cyber Security Centre has launched a new online security guide to help smaller organizations better manage risk
[Mise à jour du 4 mars 2024] Ivanti a publié le 29 février des recommandations de résolution pour les Ivanti Connect Secure ou Policy Secure en machine virtuelle [16]. [Mise à jour du 15 février 2024] l'éditeur a publié le 15 février des correctifs pour les versions suivantes, qui n'en...
Ivanti has released mitigation steps after reports of active exploitation of Connect Secure and Policy Secure vulnerabilities
Law enforcement operations on cybercriminal infrastructure have proven efficient at hindering malware activity but are far from being a silver bullet, according to Recorded Future
La société Lush est en train d'enquêter sur une cyberattaque et a pris des mesures immédiates pour sécuriser ses systèmes. Basée à Poole, l'entreprise collabore avec des spécialistes externes en informatique forensique pour mener une enquête approfondie. Lush a également informé les autorités compét...
Cyber-attacks and misinformation top WEF's list of global risks, with cybercrime poised to exploit tech advancements and AI dominance raising concerns about vulnerability
The Arctic Wolf report found that 14.3% of officials believe their state is not prepared at all to deal with election-targeted cyber incidents, including phishing and disinformation campaigns
RE&S Holdings, une entreprise japonaise opérant dans le secteur de la restauration, a été victime d'une attaque de ransomware, avec un accès non autorisé à ses serveurs. Malgré l'impact sur les données stockées, la société a activé son plan de continuité d'activité, affirmant qu'aucun impact signifi...
Market.Us found that the global cyber insurance market will be worth $90.6bn by 2033, driven by increasing cyber-threats and growing regulations
State-backed Ukrainian hacking group Blackjack has launched a destructive attack against a Moscow-based ISP in retaliation for Kyivstar attack