> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
"TheDearthStar" hacker confesses to stealing and selling PII of more than 65,000 medical center employees
ICO claims customers did not consent to receiving marketing messages
Leverage a bug in the AWS API to enumerate permissions for a role without logging to CloudTrail and alerting the Blue Team.
Fallout from the SITA incident in March continues
CNA Financial was struck in March this year
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in April:
Articles
Report a Potential Security Issue
Firebox Remote Management Best Practices
T40 and T40-W models might have an internal LED light that is visible throug...
FBI’s Internet Crime Complaint Center passes complaint milestone
Scammer partnered with Peruvian call centers to extort $3.5m from Spanish-speaking US residents
WatchGuard’s Support and Service team is continually looking for ways to improve how we provide support to our customers. We are pleased to announce several enhancements to our support case experience, starting on 11 May.
Panda corporate products cases now routed into WatchGuard systems
As part of o...
Cyber-criminals give Irish health system free decryption tool after crippling it with ransomware
Report reveals widespread risky behavior from IT security leaders
Akamai claims web app attacks also surged to 6.3 billion
Check Point reveals series of mistakes by developers
Annual panel at the RSA Conference identifies a number of areas of concern, including improper session handling and an evolution of ransomware
Experts at the RSA Conference outline the role, challenges and opportunities for the emerging job category of the chief product security officer (CPSO)
Iran, Russia, North Korea and China are becoming increasingly reckless in their actions
Wendy Nather and Wade Baker have a few data-driven ideas about which activities actually help to make security programs work and which ones have less impact
US Postal Service reportedly uses facial recognition tech to identify unknown targets in investigations
Chrissy Teigen’s apology for previous cyber-bullying not enough to stop retailers from ditching her products
Governor’s aide suspended following arrest over unemployment benefits fraud