> TODAY'S SUMMARY (19 articles)
Today's cyber news highlights several significant threats and trends. Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension after stealing credentials from Firework. Meanwhile, the Russian extortion group n0n claims to have stolen nearly one billion traveler records from Expedia via a compromised third-party provider. The U.S. government disrupted a North Korean campaign responsible for over $400 million in cryptocurrency theft, underscoring ongoing geopolitical cyber threats. Additionally, CISA has added serious vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog, indicating an increase in targeted attacks on critical infrastructure. Finally, discussions around AI's impact on cybersecurity raise concerns about overreliance potentially eroding essential skills in security teams.
|
// AI-powered summary generated at 20:00
Researchers find four vulnerabilities in popular model
Today, I published the following diary on isc.sans.edu: “More Exotic Excel Files Dropping AgentTesla”: Excel is an excellent target for attackers. The Microsoft Office suite is installed on millions of computers, and people trust these files. If we have the classic xls, xls, xlsm file extensions, Ex...
Australian Telemarketer Breach, 23 August 2023: Pareto Phone, a Brisbane-based telemarketing company that contacts potential donors on behalf of charities, was hacked by cybercriminals in April. 70 charities, including Amnesty International Australia, Australian Conservation Foundation, Wilderness S...
La Haute École de Lucerne (HSLU) a été victime d'une attaque de ransomware ciblant une de ses environnements informatiques spécifiques, séparée des services IT centraux. Cette attaque n'a pas affecté le fonctionnement général de l'école car elle a visé principalement le département informatique. Les...
L'entreprise Heuschen & Schrouff, basée à Landgraaf et spécialisée dans la vente en gros de produits alimentaires asiatiques, a été victime d'une cyberattaque paralysant tous ses systèmes. Selon des sources de la chaîne provinciale L1, les pirates informatiques exigeraient une rançon sous forme de p...
The research also highlights a shift in hacker tactics toward exploiting network server flaws
Le Dakota Eye Institute a également rapporté une brèche de données touchant 107 143 patients, sans préciser la nature de l'incident mais a renforcé ses politiques de sécurité des données en réponse.
ESET's investigation also revealed that certain Spacecolon versions contain Turkish strings
DIGIHEALS will call for proposals for technologies originally designed for national security
Today, I published the following diary on isc.sans.edu: “Have You Ever Heard of the Fernet Encryption Algorithm?“: In cryptography, there is a gold rule that states to not develop your own algorithm because… it will be probably weak and broken! They are strong algorithms (like AES) that do a great j...
NCC Group researchers observed 502 ransomware attacks in July 2023, with a large proportion made up of Clop’s exploitation of MOVEit
Australian utility company Energy One confirmed it had taken steps to limit a cyber-attack affecting its corporate systems
Je suis désolé, mais l'extrait que vous avez fourni ne contient pas d'informations sur une cyberattaque à la Stadtbibliothek Weißwasser. Il semble plutôt être lié aux conditions d'un abonnement, probablement pour un service en ligne. Pourriez-vous fournir un extrait de l'article qui parle spécifique...
Legitimate software used to deploy backdoor malware
Latest vulnerability affects Ivanti Sentry
Leaseweb, un fournisseur d'hébergement, semble avoir été touché par une cyberattaque, causant des problèmes à ATPS Online, une entreprise qui fournit une solution de gestion du temps via un modèle SaaS. ATPS Online a déclaré qu'ils ont réussi à accéder à certains de leurs systèmes clés, y compris le...
Two former employees shared information with German newspaper
ESET said Facebook promoted the download of what seemed to be Google’s Bard AI tool
Today, I published the following diary on isc.sans.edu: “Quick Malware Triage With Inotify Tools“: When you handle a lot of malicious files, you must have a process and tools in place to speedup the analysis. It’s impossible to investigate all files and a key point is to find interesting files
The p...
The feature, called the “Safety Check,” is designed to address three specific scenarios