> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
Des informations personnelles et sensibles d'employés et de clients ont été dérobées lors d'une attaque de cybersécurité par ransomware contre le département des services humains du comté de Rock, suite à une campagne de phishing par e-mail. L'attaque, qui a eu lieu entre le 22 et le 30 septembre, a...
Symantec explained that the attack leveraged a new variant of Budwormâs SysUpdate backdoor
During an Indirect Prompt Injection Attack an adversary can exfiltrate chat data from a user by instructing ChatGPT to render images and append information to the URL (Image Markdown Injection), or by tricking a user to click a hyperlink.
Sending large amounts of data to a third party server via URL...
Perception Point research highlights the extensive reach of this issue, affecting hotels and resorts on a global scale
The Trojan utilizes the Obfuscapk obfuscator for Android APK files, Kaspersky explained
Talks about baseband vulnerabilities are certainly in fashion these days. However, most publications so far omit the step of escaping the baseband runtime. With the novelty of baseband-only vulns wearing off, we decided to look at some popular targets (Samsung and MediaTek smartphones) with full cha...
If the US government shutdown occurs, it is expected that 80% of CISA employees will be furloughed
BlackTech group blamed for cyber-espionage operation
Le géant de l'automatisation des bùtiments, Johnson Controls International, a subi une importante attaque de ransomware qui a chiffré de nombreux appareils de l'entreprise, y compris les serveurs VMware ESXi, affectant ses opérations et celles de ses filiales. L'attaque a été lancée par le groupe de...
Itâs the fifth zero-day to be fixed this year
Kettering-based KNP Logistics Group was hit in June
La cristallerie Baccarat a été victime d'une cyberattaque, comme l'a révélé sa directrice générale, Maggie Henriquez, dans un courriel adressé aux clients. Cette attaque a entraßné une réduction de l'activité de l'entreprise, bien que l'impact sur la production reste incertain. Pour l'instant, aucun...
Patchstack uncovered an unauthenticated role privilege escalation flaw and an account takeover vulnerability
According to Resecurity, Ransomed.vc is demanding a ransom of over $1m from NTT Docomo
L'Agence Nationale de Ăguas e Saneamento BĂĄsico (ANA) au BrĂ©sil a Ă©tĂ© victime d'une cyberattaque le 27 septembre, ce qui a entraĂźnĂ© l'arrĂȘt de ses systĂšmes pour interrompre l'attaque et assurer leur sĂ©curitĂ©. Ă partir du 4 octobre, l'ANA a commencĂ© Ă rĂ©tablir progressivement ses systĂšmes et services...
Abnormal Security also found a 167% increase in advanced email attacks
Lorraine Dryland, CISO at First Sentier Investors, discusses how to help executives make fast and informed decisions when presented with a ransomware demand
La mairie de Gondomar, au Portugal, a subi en septembre la plus grande cyberattaque jamais enregistrée contre une institution publique dans le pays, coûtant déjà 1,5 million d'euros pour la restauration du systÚme. L'attaque, qui aurait été lancée depuis un serveur russe, a entraßné des pertes de pl...
Russia-backed cyber-attacks in Ukraine jumped 123% in the first half of 2023 â but were less critical than in 2022
ICO says handling of domestic abuse victimsâ data must improve