> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant threats, including a major breach at French Bank Crédit Mutuel Arkéa, where attackers exploited vulnerabilities in a third-party service provider to steal up to $133 million. This incident underscores the ongoing risk associated with third-party integrations. Additionally, refrigeration cyberattacks continue to target European retailers, raising concerns about supply chain security. As organizations face these evolving threats, proactive measures and timely patching, especially in light of upcoming Patch Tuesday, are crucial for mitigating risks. Overall, the focus remains on enhancing security protocols to safeguard against sophisticated cyber threats.
|
// AI-powered summary generated at 12:00
The average malware variant now utilizes 11 TTPs
Security and ethical concerns raised by surveillance commissioner
Last year we published UnZiploc, our research into Huaweiâs OTA update implementation. Back then, we have successfully identified logic vulnerabilities in the implementation of the Huawei recovery image that allowed root privilege code execution to be achieved by remote or local attackers. After Hua...
We have identified a new Toc-ToU race condition vulnerability in Huaweiâs recovery image implementation of SD-card based firmware updates. The vulnerability can be exploited to achieve arbitrary code execution in recovery mode, enabling unauthentic firmware updates, firmware downgrades to a known vu...
La municipalité de Marechal Floriano a été victime d'une cyberattaque qui a crypté les données de la préfecture, rendant les services publics et le site officiel inaccessibles. Un rapport a été déposé auprÚs de la police civile et les techniciens ont isolé la menace, mais une grande partie des donné...
It is an initiative designed to limit user data sharing in digital advertising
It shows the threat actor trying to convince Royal Mail to pay the ransom using various techniques
In fall 2022, Trail of Bits audited cURL, a widely-used command-line utility that transfers data between a server and supports various protocols. The project coincided with a Trail of Bits maker week, which meant that we had more manpower than we usually do, allowing us to take a nonstandard approac...
The attacks mainly targeted victims in the US but also in the UK, Turkey, and the Philippines
Recorded Future analyzed how threat actors have been exploiting VMware ESXi vulnerabilities over the past three years
Le district scolaire Sweetwater Union a confirmé qu'une cyberattaque avait causé une panne de systÚme de plusieurs jours en février. Les données personnelles des employés, des étudiants et des familles ont été compromises. L'attaque a été découverte en mai et le district a mis en place des mesures d...
February Patch Tuesday contains updates for over 70 CVEs
Valentineâs Day outages hit airline and media companies
Une cyberattaque a compromis les données personnelles des élÚves et du personnel du Bethel School District, causant du stress et des problÚmes financiers dans la communauté. L'attaque, qui a eu lieu en février, n'a été communiquée aux intéressés qu'en mars, et a entraßné des perturbations des systÚm...
Indian threat group conducts hundreds of operations in a short time-span
The infostealer Vidar has returned to the top 10 after an increase in âbrandjackingâ attacks
Le bureau du procureur gĂ©nĂ©ral de Virginie a Ă©tĂ© victime d'une cyberattaque sophistiquĂ©e, obligeant l'agence Ă fermer ses systĂšmes informatiques et Ă recourir Ă des dĂ©pĂŽts de cour en papier. Les enquĂȘteurs de la police d'Ătat de Virginie et du FBI ont Ă©tĂ© appelĂ©s pour enquĂȘter sur l'incident. Les re...
The group previously targeted government agencies and think tanks in Asia and Europe
Experts say the delay in notifying customers left data potentially open to compromise
Burton Snowboards a confirmé une violation de données aprÚs une cyberattaque en février. Des informations sensibles de clients ont été potentiellement consultées ou volées. L'attaque a été découverte aprÚs une panne systÚme et l'annulation de commandes en ligne. Des experts externes ont été embauché...