> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Fastly says blackout that hit many high-profile websites on Tuesday caused by a software bug
NCSC's Eleanor Fairford reveals the three biggest cyber threats since the start of COVID-19
Introduction Last summer I have discovered several vulnerabilities in the implementation of Samsung’s NPU device driver. While I was working on completing my proof of concept exploit, Ben Hawkes from Google’s Project Zero reported the same vulnerabilities to Samsung. Later that year Brandon Azad rel...
Most senior executives also believe more money is needed to protect trade secrets
The 50 security fixes will resolve critical issues, including actively exploited zero-day vulnerabilities
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in May:
Articles
Apple iOS clients show security warning when they connect to WPA/WPA2 mixed encryption networks
AuthPoint does not sync users from Active Directory
Best ...
Over 800 suspected criminals have been arrested after being tricked into using a messaging app owned by the FBI
Operators of defunct app settle alleged fraud and data security failures with FTC
FBI is investigating unauthorized access into New York City Law Department’s IT system
Grief ransomware gang claims to have stolen 2.5GB of personal data from St. Clair
The platform will allow FCEB agencies to receive security feedback from Bugcrowd's community of ethical hackers
Mikko Hypponen warns that cybersecurity will become a matter of life and death due to growing reliance on the internet
A failure in Fastly's CDN system led to a number of major websites including The Guardian and New York Times going offline
Notorious threat group copies name of new Babuk "PayloadBin" leak site
The tech giant has been fined for favoring its own Google Ad Manager technologies
The Justice Department recovered roughly $2.3 million of the $4.4 million reportedly paid to the Russian group
Anonymous blasts billionaire for “superiority complex” and alleged Bitcoin trolling
Deloitte snaps up Silicon Valley–based security posture management provider
Azusa kept quiet about ransomware attack that netted cyber-criminals $65K
Courtot became CEO of Qualys in 2001, leading its global expansion