> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant threats, including a major breach at French Bank Crédit Mutuel Arkéa, where attackers exploited vulnerabilities in a third-party service provider to steal up to $133 million. This incident underscores the ongoing risk associated with third-party integrations. Additionally, refrigeration cyberattacks continue to target European retailers, raising concerns about supply chain security. As organizations face these evolving threats, proactive measures and timely patching, especially in light of upcoming Patch Tuesday, are crucial for mitigating risks. Overall, the focus remains on enhancing security protocols to safeguard against sophisticated cyber threats.
|
// AI-powered summary generated at 12:00
Hackers exploited vulnerabilities in Microsoft SharePoint servers belonging to Switzerlandâs Federal Office of Information Technology, Systems and Telecommunication (BIT), compromising the login credentials of around 200 accounts. On July 28, BITâs security specialists noticed unusual activity on th...
The club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affected and remain fully operational.
Open Source had a great childhood.
For two decades it got to be a kid. It ran around barefoot, gave everything away, trusted strangers, and never once thought about who was watching. It ran the kind of lemonade stand that took IOUs from anyone who wandered up â take what you need, pay me back whene...
Cybernox revendique plusieurs fuites françaises, dont BlocTel et associe ses publications à une campagne contre Chat Control et la politique.
Meta was ordered to pay $567M after a judge ruled its platforms harmed children, bringing New Mexico penalties to $942M. Meta âs child-safety legal bill just got another half-billion dollars heavier. A New Mexico state judge ruled that companyâs platforms constitute a âpublic nuisance,â the BBC repo...
Intruder gained access to engineering files and potentially export-controlled technical data
Learn what shadow AI is, how it exposes business data, how to detect unapproved AI tools, and how to reduce the security and compliance risks.
A use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath.
The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148...
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek.
Discover whatâs new on Forensic Focus â trace eight years of innovation with Atola TaskForce, explore how BelkaGPT brings offline AI to digital investigations, learn why the first 60 minutes with digital evidence matter, and more.
Un professionnel RH français fait lâobjet dâune revendication portant sur des dizaines de milliers de documents personnels sensibles.
Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor
Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows and gather related email.
"...
Des entreprises et une mairie françaises apparaissent sur la plateforme cybercriminelle Kybit recrutant des affiliés.
Through data brokers, ICE is buying the information you provided to open a credit card.
A hidden backdoor in 20 router models lets remote servers execute commands as root, putting affected devices at risk of takeover. Jacob Baines had a router on his desk that kept trying to call home, and it wasnât supposed to. VulnCheck researchers found a backdoor baked into Zbtlink routers, and itâ...
PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors.
PortSwigger said a separate human-guided discovery cascade also exposed a zer...
Humans will get the AI models they deserve
NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.
The post Truck Brake Controllerâs Safety Recall Doubled as Hidden Security Fix appeared first on SecurityWeek.
Discover the file extensions most frequently abused by attackers in malicious email blasts, and learn how to safely scan incoming attachments for malware.