> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Une vulnérabilité a été découverte dans Kaspersky Endpoint Security Windows. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Wolf CMS 0.8.3.1 - RCE v
De multiples vulnérabilités ont été découvertes dans JFrog Artifactory. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une falsification de requêtes côté serveur (SSRF) et un contournement de la politique de sécurité.
Une entreprise de services publics municipale en Bavière a été victime d'une cyberattaque qui a chiffré son réseau informatique central. L'incident, survenu la semaine du 1er septembre, a perturbé les systèmes de bureau, mais n'a pas affecté les services essentiels tels que l'électricité et l'eau. L...
Les Westfield Public Schools, dans le New Jersey, ont subi une panne de réseau qui a perturbé les communications et l'enseignement numérique pendant la première semaine de l'année scolaire. Bien que le district ait initialement attribué la panne à une défaillance matérielle, le groupe INC Ransom a r...
IT operations and security teams receive thousands of alerts every day from threat intelligence sources, such as vulnerability scanners, observability tools, Red Hat Lightspeed, and more. The challenge is identifying, correlating, and addressing impactful alerts from an ongoing, high-volume stream o...
Un incident de cybersécurité a perturbé le système de licences de l'Alabama Board of Nursing, mettant hors ligne le système de licences en ligne et forçant l'agence à traiter les demandes par voie papier. Cette panne a entraîné des retards dans l'embauche dans les hôpitaux et cliniques de l'État. Le...
Zdrowit S.A. a été victime d'un incident de sécurité impliquant un accès non autorisé à ses systèmes informatiques et le chiffrement d'une partie de ses ressources. La société a confirmé que des procédures de sécurité ont permis de stopper les actions non autorisées. Bien que le groupe de ransomware...
The California legislature passed Assembly Bill 1709 (A.B. 1709) today, which functions as a sweeping ban on social media use for young people under the age of 16. This well-intentioned, but deeply flawed piece of legislation, cuts young people off from essential information and experiences, particu...
Avant de partager un contenu politique spectaculaire, quelques vérifications simples peuvent révéler une possible intox.
McKesson admits breach as ShinyHunters demands $55.2M
The major healthcare sector vendor did not identify the attackers, but ShinyHunters, a prolific group increasingly targeting the sector, claimed responsibility.
The post McKesson copes with fallout from data theft extortion attack appeared first on CyberScoop.
USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the
corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that OpenZFS incorrectly handled authorization checks for
certain ioctl operations on Linux. A local attacker c...
The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. [...]
Federal law enforcement continued to warn about ATM jackpotting gangs as it announced guilty pleas from five Venezuelan nationals.
Microsoft on Friday reported that a glitch is causing Windows to tell users that Microsoft Defender Antivirus is turned off when it is in fact fully functional, a bug that the vendor says it is working to fix.
Consultants say that this advisory raises a major concern in tha...
One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM backends. It then received a real coding-agent session &#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x94; history, files...
The history of technology is rife with copyright panics.  In the 1980s, major rightsholders ran to Congress and the courts, claiming that videotape recorders (VTR) were “to the American film producer and the American public as the Boston strangler is to the woman home alone.” Then, the Supreme Court...
ValleyRAT hides behind legitimate adware, using DLL sideloading to evade detection, steal data and give Silver Fox control of infected systems. ValleyRAT doesn’t always need to disguise itself as a cracked game or a fake browser update. It can also hide behind something much more ordinary: an applic...