> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant threats, including a major breach at French Bank Crédit Mutuel Arkéa, where attackers exploited vulnerabilities in a third-party service provider to steal up to $133 million. This incident underscores the ongoing risk associated with third-party integrations. Additionally, refrigeration cyberattacks continue to target European retailers, raising concerns about supply chain security. As organizations face these evolving threats, proactive measures and timely patching, especially in light of upcoming Patch Tuesday, are crucial for mitigating risks. Overall, the focus remains on enhancing security protocols to safeguard against sophisticated cyber threats.
|
// AI-powered summary generated at 12:00
In our third blog about migrating to a zero trust architecture, we consider the security properties of an Always On VPN, and the factors to consider when deciding if you no longer need one.
Le cabinet d'avocats Bryan Cave Leighton Paisner a été victime d'une cyberattaque en février 2023. Cette attaque a exposé les données personnelles de plus de 50 000 employés actuels et anciens de Mondelēz International, une entreprise de snacks. Les informations volées comprenaient les dates de nais...
The claims come from Mozilla's *Privacy Not Included researchers
It warned nations' defenders against disruptive and defacement attacks today
Le système de bibliothèques du comté de Fort Bend a subi une cyberattaque qui a entraîné une panne de son site web. Les données des usagers, telles que les noms, adresses et numéros de téléphone, n'ont pas été compromises, selon les responsables de la bibliothèque. Les services en ligne sont progres...
The move aims to protect the Commission against cybersecurity threats
Recorded Future claims war in Ukraine is having a major impact
In part one of this two-part series, we escaped Webviews in real-world misconfigured VSCode extensions. But can we still escape extensions if they are well-configured? In this post, we’ll demonstrate how I bypassed a Webview’s localResourceRoots by exploiting small URL parsing differences between th...
FTC says consumer fraud is up 30% on the previous year
Trend Micro urges victim organizations to resist extorters demands
Le Gaston College a été victime d'une attaque de ransomware en février. Le pirate a accédé à des fichiers contenant des informations personnelles des employés. Le président du collège a envoyé un e-mail interne pour informer les employés de la situation et les inciter à souscrire à une surveillance...
The Wslink loader can reportedly serve other connecting clients and load additional payloads
ReversingLabs cybersecurity researchers spotted 41 malicious PyPI packages
Analyzing ChatGPT's capabilities and various claims about how it will revolutionize cybercrime.
The malicious software employs DLL sideloading techniques to run its malicious components
A fifth of firms use accountants to help with compliance
TL;DR: This two-part blog series will cover how I found and disclosed three vulnerabilities in VSCode extensions and one vulnerability in VSCode itself (a security mitigation bypass assigned CVE-2022-41042 and awarded a $7,500 bounty). We will identify the underlying cause of each vulnerability and...
Fortinet detected a 50% increase in destructive attacks in H2 2022
Campaigns designed to steal card information and install malware
Le Casino Del Sol dans la région de Tucson a été la cible d'une tentative de cyberattaque le 21 février, entraînant une panne généralisée de ses systèmes, y compris les distributeurs automatiques, les systèmes de cartes de crédit et les jeux de table qui ne pouvaient accepter que du liquide. Le 27 f...