> TODAY'S SUMMARY (3 articles)
Today's cybersecurity news highlights several significant threats. First, hackers have exploited a compromised ConnectWise credential to gain access to 173 Microsoft 365 tenants, raising concerns about the security of cloud services. Additionally, Rank Math has reported that certain downloads of their SEO PRO version 3.0.123 contained malware, indicating risks associated with third-party software updates. Furthermore, federal agencies have released new cybersecurity guidance for securing frontier AI systems, emphasizing the need for robust controls and independent testing during AI model evaluations. These developments underscore ongoing vulnerabilities in cloud security, software integrity, and the importance of proactive measures in emerging technologies.
|
// AI-powered summary generated at 08:00
Kardon Loader is a new malware downloader with full bot capabilities.
Landmark decision will force government to obtain warrant for location data
Reprise d’activité de ce blog ! Et comme premier billet, un retour sur Wannacry et surtout notPetya, attaques ayant réussi l’exploit de causer des centaines de millions d’euros de perte suite à l’interruption de lignes de productions dans des usines [...] Lire la suite
SEC Consult confirms mother’s suspicion she was spied on
Action Fraud warns UK users not to fall for scam
Sometimes a conference just gets it right. Good talks, single track, select engaged attendees, and no sales talks. It’s a recipe for success that Kolide got right on its very first try with QueryCon, the first-ever osquery conference. It’s no secret that we are huge fans of osquery, Facebook’s award...
Netlab 360 detected a surge in Satori botnet infecting vulnerable routers and IoT devices.
Concerns for nation-state threats grow, with many fearing attackers intend to do harm.
Attackers use Metasploit to target victims with malware.
The ACLU has issued guidance on how software developers should deal with demands on malicious security updates.
Malicious actors leverage Word as the vector of choice.
A Firebase variant was reportedly downloaded 620 million times.
A successful phishing campaign leaves oregon.gov email on many blacklists.
YouTube videos have been detected claiming to contain downloads for the Android version of Fortnite
Businesses recognize employee negligence as major security risk, but fail to take action with robust training programs
New survey assesses senior-level attitudes towards security risks posed by 18-24-year-old workers
Financial services companies are being targeted by sophisticated attackers.
A newly identified group infiltrating telecom, defense and satellites is likely engaging in espionage.
Threats from Russia, China and the Five Eyes ranked as having potentially catastrophic impact for businesses.
Arizona man sent down for DDoS attacks