> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
La Benefit Management Corporation a signalé une violation de données au procureur général du Massachusetts après qu'une partie non autorisée ait accédé à son réseau informatique entre le 8 et le 11 septembre 2023, exposant des informations sensibles de certains clients d'Osaic Wealth, incluant noms,...
The findings come from a new report released by Microsoft Threat Analysis Center on Thursday
Cisco Talos reported that the campaign has been active since at least November 2021
Wyndemere Senior Care LLC, basé à Wheaton, IL, a informé 6 846 personnes que certaines de leurs informations personnelles ont été exposées lors d'une cyberattaque détectée le 8 septembre 2023. Une activité suspecte a été détectée dans ses systèmes informatiques, confirmant un accès réseau non autori...
The team has discovered the exploitation of at least one zero-day flaw in the last few weeks
Vladislav Klyushin hacked into US filing agents to discover non-public information about hundreds of companies on the US stock exchange
Articles
Access point cannot connect to WatchGuard Cloud after reset to factory-default settings
AuthPoint shows a large number of failed Office 365 authentications that do not have a source IP address
How do I change the name shown in WatchGuard Cloud for my locally-managed or cloud-managed device...
ICO reveals over half of women are worried about their data
Apache flaw can enable remote command execution
Australian Retail Privacy Breach, 08 September 2023: Dymocks warns customers of data breach after account information leaked on dark web. Customers' addresses, email addresses, phone numbers, and membership details may have been compromised.
The post Incident: Dymocks warns customers of data breach...
Users of iOS devices urged to enable lockdown mode
The Traceable report is based on insights from 1629 cybersecurity experts across the US, UK and EU
Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.
The post Incident: Defence Housing Australia investigates third-party pr...
Akamai found domain shifts of 50 days from expected dates, suggesting hacker-driven confusion
The exploit code, shared by a researcher on Reddit, demonstrates the issue
Le groupe hospitalier Saint-Vincent à Strasbourg a été victime d'une cyberattaque, entraînant l'arrêt de son système informatique. L'attaque a eu lieu dans la nuit du mercredi au jeudi 7 septembre et a été menée par des hackers. Malgré l'attaque, les cliniques ont pu maintenir leur activité, bien qu...
These new sanctions follow a first wave in February 2023, where seven Russians involved with Trickbot and Conti were also sanctioned
The attackers may have accessed sensitive patient information, such as health insurance and medication details
L'académie St Augustine à Maidstone, dont le principal est Jason Feldwick, a été victime d'une grave cyberattaque. Cette attaque informatique a été confirmée mercredi. Il n'est pas précisé si des données ont été compromises ou si des mesures ont été prises pour résoudre le problème. L'impact de cett...
The threat actor used the stolen key to breach 25 organizations, including US government agencies