Franse supermarktketen Intermarché lekt gegevens van 287.000 klanten
De Franse supermarktketen Intermarché heeft de gegevens van meer dan 287.000 klanten gelekt. Het gaat om voor- en achternaam, ...
Read at the source
Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 65BleepingComputer · 171CERT Polska · 78Cisco Talos · 47CrowdStrike · 32Dark Reading · 71DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 57The Hacker News · 300The Record · 43Unit 42 · 46
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management (RMM) programs like ConnectWise ScreenConnect. The campaign has been codenamed SMOKE#SCREEN by Securonix Threat
Read at the source
The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software
Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-source software supply chain. The post The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software appeared first on Unit 42.
Read at the source
Almost Half of Malware Samples Communicate Direct to IP
Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures networks against these threats. The post Almost Half of Malware Samples Communicate Direct to IP appeared first on Unit 42.
Read at the source
Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th)
This morning, I noticed specific sources "hunting" for vulnerabilities in URLs that I haven&#;x26;#;39;t noticed before. All of these URLs appear to be associated with diagnostic tools:
Read at the source
ING komt met informatie over verplicht gebruik van app voor Wero-betalingen
ING heeft een pagina gelanceerd waarop het klanten meer informatie geeft over het verplicht gebruik van de ING App voor het ...
Read at the source
Apple maakt opnieuw bezwaar tegen eis Britse overheid om iCloud-backdoor
Apple heeft opnieuw bezwaar gemaakt tegen een eis van de Britse overheid om een backdoor te ontwikkelen die toegang tot ...
Read at the source
When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted
The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Security teams have long estimated risk by ranking attacker sophistication. Nation-state actors sat at one end. Organized criminal groups followed. Inexperienced attackers, dismissed as "script kiddies," sat at the other end, running public
Read at the source
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied
Read at the source
Fabrikant bitcoin-wallet vernietigt voorraad na diefstal van 88 miljoen dollar
Coinkite, het Canadese bedrijf achter de hardwarematige bitcoin-wallet Coldcard, heeft een deel van de voorraad vernietigd ...
Read at the source
1121-1130 / 1448 news items shown