> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
CSAM found on computer of nurse investigated over cyber-attack on former employer
Government agencies and companies in Australia affected by breach of recruitment company’s data
How to start the journey to zero trust architecture once you have decided it meets your business requirements.
The study revealed cyber-attackers can breach 93% of organizations’ network perimeters and gain access to their resources
Google and Meta agree to safeguard data on fiber-optic cable joining US with Southeast Asia
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
Data held on the UK police national computer have been posted on the dark web
Sans Institute exercise reportedly sees defenders get hands-on practice
On August 18, 2021, samczsun reported a critical vulnerability in SushiSwap’s MISO smart contracts, which put ~350 million USD (109 thousand ETH) at risk. This issue is similar to an attack that was conducted on the Opyn codebase in August of 2020. At the time of the report, I was finishing my […]
Conspiracy ran for 13 years
CISA updates patching guidance to demand immediate action
You just cloned a fresh source code repository and want to get a quick sense of its dependencies. Our tool, it-depends, can get you there. We are proud to announce the release of it-depends, an open-source tool for automatic enumeration of dependencies. You simply point it to a source code repositor...
Cybersecurity official shares tips for cutting risk ahead of the holidays
Seven Pi Kappa Alpha fraternity members allegedly harassed student who reported hazing
Version française: 🇫🇷 In January 2021, ANSSI was informed of a large campaign of attacks against French entities linked to the APT31 intrusion set. The investigations carried out by ANSSI led to the analysis of the intrusion set’s entire chain of infection. In turn, the knowledge acquired was...
Chicago accountancy company’s data exposed in ransomware attack
Fraudsters are leveraging the latest Spider-Man movie to spread malicious files and phishing pages, researchers from Kaspersky have warned
English version : 🇬🇧 En janvier 2021, l’ANSSI est informée d’une vaste campagne d’attaques à l’encontre d’entités françaises liée au mode opératoire d’attaque (MOA) APT31. Les investigations réalisées par l’ANSSI ont permis d’analyser l’ensemble de la chaîne de compromission du mode opératoire....
Agency urges firms to take proactive security approach
Social media giant acts to disrupt cyber-mercenaries