> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
L'Université Carnegie Mellon a été victime d'une cyberattaque le 25 août 2023, qui a potentiellement compromis les informations personnelles de plus de 7 300 personnes, incluant des étudiants actuels ou anciens, des employés, des candidats et des contractants. L'attaque a été rapidement détectée par...
Between Monday and Tuesday, the FBI has traced approximately 1580 stolen Bitcoins
The compromised data includes names, usernames, email addresses and internal service-related details
L'école spécialisée Astrid-Lindgren-Schule à Lemgo a été victime d'une cyberattaque qui a toujours des conséquences. Les systèmes de téléphone et d'e-mail de l'école ne fonctionnent toujours pas. Des experts travaillent actuellement à restaurer les données qui ont été cryptées lors de l'attaque. Ini...
Netenrich suggested LOLKEK, BIT, OBZ, U2K and TZW ransomware strains share significant similarities
The draft standards are expected to become the global benchmark for quantum-resistant cybersecurity across the world in 2024
La clinique TissuPath a envoyé une lettre de notification à tous les médecins référents principaux concernant l'incident et est en train de contacter toutes les personnes affectées. Le Centre de cybersécurité australien (Australian Cyber Security Centre - ACSC) de l'Australian Signals Directorate es...
The data breach is suspected to be linked to the Clop MOVEit hack
Emails use social engineering to con victims
Les Stadtwerke Neumünster (SWN) en Allemagne ont été victimes d'une cyberattaque de type espionnage, ce qui les a conduits à mettre hors ligne tous leurs systèmes informatiques par mesure de précaution. Bien que les services essentiels tels que l'électricité, le gaz, le chauffage et l'internet reste...
UK council identified attack on Monday
Arion Kurtaj was deemed not fit to stand trial
Many security-critical off-chain applications use a simple block delay to determine finality: the point at which a transaction becomes immutable in a blockchain’s ledger (and is impossible to “undo” without extreme economic cost). But this is inadequate for most networks, and can become a single poi...
A Sophos report finds that attackers are adapting their approaches in the face of improved detection capabilities
SentinelOne observed that the imitating application targeted users within work environments
Today, I published the following diary on isc.sans.edu: “More Exotic Excel Files Dropping AgentTesla”: Excel is an excellent target for attackers. The Microsoft Office suite is installed on millions of computers, and people trust these files. If we have the classic xls, xls, xlsm file extensions, Ex...
Group-IB said cyber-criminals used the flaw to create archives packaged with DarkMe, GuLoader and Remcos RAT
The Check Point report also highlights an evolution of ransomware tactics
Australian Telemarketer Breach, 23 August 2023: Pareto Phone, a Brisbane-based telemarketing company that contacts potential donors on behalf of charities, was hacked by cybercriminals in April. 70 charities, including Amnesty International Australia, Australian Conservation Foundation, Wilderness S...
Cybersecurity provider Barracuda used AI-powered account profiling to detect nearly a million cyber incidents in 2023