> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
FriarFox allows intruders to monitor emails and browser data
Energy giant has informed affected customers
Greetings, WatchGuard Partners!
We would like to inform you that before you can manage accounts and licenses for Threat Detection and Response (TDR), you are required to perform a one-time migration procedure. During this migration, you manually link an existing WatchGuard Cloud Tier-2 account to an...
Birch joins Kim Cameron as honorary president of the EEMA
School officials accused of falsifying enrollment figures to get more state funding
Credits John
Github: https://github.com/johnjhacking
Aubrey Cottle
Twitter: https://twitter.com/Kirtaner
Jackson Henry
Twitter: https://twitter.com/JacksonHHax
Robert Willis
Twitter: https://twitter.com/rej_ex
Identification During security research, John Jackson stumbled upon the Keybase Client dir...
Data of Accellion client advertised for sale online by Clop ransomware group
Intimidation campaign against senior Iraqi MP leads to arrests in Australia and Canada
Connect to the Tor network from an EC2 instance without alerting GuardDuty.
Developing cyber-skills has to start from a young age
The MHRA, FCE and NCA will join the initiative to direct users to information pages
Indian Government Breach, Massive Amount of Critical Vulnerabilities Executive Summary Sakura Samurai knew that the Indian Government operated an RVDP (Responsible Vulnerability Disclosure Program). Jackson Henry put a list together of initial assets in scope for Sakura Samurai to legally test. Robe...
Netwrix finds a third of HCOs suffered internal breaches in 2020
Check Point sees double extortion attacks surge
Zero-knowledge (ZK) proofs are gaining popularity, and exciting new applications for this technology are emerging, particularly in the blockchain space. So we’d like to shine a spotlight on an interesting source of implementation bugs that we’ve seen—the Fiat Shamir transformation. A ZK proof can be...
Tatmadaw-incited violence and disinformation force social network’s hand
Tech companies point fingers at customers and one another in SolarWinds Senate hearing
Les marqueurs techniques, les règles SNORT et YARA suivantes sont issues des analyses de l'ANSSI lors du traitement d’une campagne de compromission par le mode opératoire Sandworm touchant plusieurs entités françaises et ciblant le logiciel de supervision Centreon. Cette campagne d'attaque est...
New event dates to be announced as soon as possible
SCANA Corporation’s ex-CEO to plead guilty to charges linked to Nukegate scandal