> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
AEPD fines Vodafone Spain a record-breaking $9.72m for failing to protect data
NCSC warns childminders and nurseries to safeguard personal data and be wary of malware
Many machine learning (ML) models are Python pickle files under the hood, and it makes sense. The use of pickling conserves memory, enables start-and-stop model training, and makes trained models portable (and, thereby, shareable). Pickling is easy to implement, is built into Python without requirin...
UK Cyber Security Council introduces its first four trustees
Users will soon be able to use security keys as sole authentication method
Le CLUSIF (CLUb de la Sécurité de l’Information Français) publie un document qui s’adresse à l’ensemble des acteurs ayant à sécuriser un système industriel existant ou à venir.
(mise à jour Septembre 2021 : le guide est à présent [...] Lire la suite
SonicWall points to a perfect storm for threat actors in 2020
Tool designed for customers without dedicated IT or cybersecurity resource
How malware works on Operational Technology (OT) and how to stop it.
WARP reports hit a record 151 in 2020
Lookout acquires CipherCloud with the intention of creating an integrated endpoint to cloud security solution
Indian Government Breach, Disclosure Last month, Sakura Samurai announced that we had uncovered a massive amount of critical vulnerabilities. Obviously, to prevent threat actors from exploiting the vulnerabilities, we ensured that we redacted the specific issues and only gave a brief overview on wha...
Former caseworker accessed sensitive data of children hundreds of times after leaving their job
Major fire at Strasbourg data center knocks millions of websites offline and disrupts threat actors
Next week (on March, 9th 2021) I will be speaking at the Hong Kong Information Security Summit 2021.
ćˇčżŽ, ä˝ ĺĄ˝!
I was invited to share my thoughts around protecting the modern (and remote) workplace. Of course, my talk is addressing this topic from a red teaming point of view. Conference details ar...
Google will face allegations that it collected data of private browsing mode users
Study indicates that insecure practices remain prevalent among home workers
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in February:
Articles
Comcast SecurityEdge may prevent DNSWatch from monitoring or controlling DNS requests
Enable logging for subscription service dashboards
Firebox and...
Cybersecurity event will take place July 13-15 at London’s Olympia
Program will keep deactivated drivers off the roads