> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Russian-backed cyber-espionage operation is “largest” world has seen
UK’s best schools for cybersecurity instruction win National Cyber Security Centre awards
Les marqueurs techniques, les règles SNORT et YARA suivantes sont issues des analyses de l'ANSSI lors du traitement d’une campagne de compromission par le mode opératoire Sandworm touchant plusieurs entités françaises et ciblant le logiciel de supervision Centreon. Cette campagne d'attaque est...
Scammers spoof IRS to steal Electronic Filing Identification Numbers from tax pros
Over a million Mercedes-Benz cars recalled due to bug in emergency call system
Les marqueurs techniques, les règles SNORT et YARA suivantes sont issues des analyses de l'ANSSI lors du traitement d’une campagne de compromission par le mode opératoire Sandworm touchant plusieurs entités françaises et ciblant le logiciel de supervision Centreon. Cette campagne d'attaque est...
Customers will be able to conduct transactions more easily and securely
Update recognizes recent rise in ransomware infections
Les marqueurs techniques suivants sont associés à l'infrastructure d'attaque utilisée par le groupe cybercriminel TA505 depuis 2019 (voir la publication CERTFR-2021-CTI-002). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection temps...
Two men from Texas alleged to have sold fake Adderall online
Customers informed that employee sold access
Les marqueurs techniques suivants sont associés à l'infrastructure d'attaque utilisée par le groupe cybercriminel TA505 depuis 2019 (voir la publication CERTFR-2021-CTI-002). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection temps...
Investigators traced suspects via Bitcoin transactions
Baltimore County trio indicted over spoofed Moderna website selling fake coronavirus vaccines
The other day I read this blog post about “The Death of Manual Red Teams” and I thought I’d take a moment to comment on it to provide an alternative perspective.
In my opinion the premise of the blog post is backwards, highlighting a lack of understanding of what red teaming is about.
For instance t...
Man who laundered millions of dollars stolen by Eastern European computer hackers is sent to prison
Cyber-criminals use Telegram to sell food bought with stolen credit cards to hungry users
With access to an EC2 instance you can intercept, modify, and spoof SSM communications.
Risk Based Security claims to have spotted 6767 more bugs than NVD
Similar number in 2020 required no user interaction, says Redscan