The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive warning of a “cyber threat actor’s ongoing exploitation of Cisco SD-WAN systems,” describing the activity as presenting a significant risk to federal civilian executive branch networks.

Google's Threat Intelligence Group (GTIG), Mandiant, and partners disrupted a global espionage campaign attributed to a suspected Chinese threat actor that used SaaS API calls to hide malicious traffic in attacks targeting telecom and government networks.

CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to steal credentials, API keys, and other sensitive data.

Localisation, vie sexuelle, données génétiques: les fabricants se donnent le droit de tout vendre à des tiers.

The Unigym Gatineau gymnastics center in Gatineau, Quebec, has reported a data breach that occurred on October 6th, compromising the personal information of its 21,000 members. The exposed data includes names, contact details, and social insurance numbers. Members were notified via email on the following Wednesday. The breach was discovered during a routine security check, revealing unauthorized access to the center's database. Unigym Gatineau has since taken measures to secure their systems and is collaborating with cybersecurity experts to investigate the incident further. This breach underscores the critical need for robust cybersecurity measures, particularly for organizations handling sensitive personal data. Key technical implications include the necessity for data encryption, strict access controls, regular security audits, and comprehensive incident response planning. The incident also highlights the importance of third-party risk management, as breaches often occur through vulnerabilities in third-party systems. Cybersecurity professionals should view this incident as a reminder of the ongoing threat of data breaches and the need for continuous vigilance. Actionable intelligence from this breach includes the importance of regular security assessments, employee training on cybersecurity best practices, and the development of effective incident response plans. The breach at Unigym Gatineau serves as a case study for the critical need for proactive security measures and continuous monitoring to protect sensitive data.

More than 90 state and local governments have been targeted using the recently revealed vulnerability in Microsoft server software, according to a U.S. group devoted to helping local authorities collaborate against hacking threats.

Sophisticated group also used novel means to disguise their custom malware.

An international law enforcement operation conducted this week targeted the members of and infrastructure used by NoName057(16), a pro-Russian hacktivist group that has conducted distributed denial-of...

Experts say the sensitive data law firms hold and their lagging attention to cybersecurity make them prime targets.

Senate Bill 6 pairs mandatory curtailment with a voluntary demand response procurement program.

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.

The firm previously said there was 'no evidence that customer data was compromised'.

In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.

Cybersecurity professionals and the infosec community have essential roles to play in protecting our democracy, securing our elections, and building, testing, and safeguarding government infrastructur...

: But his emails! Sharing them with Google!

Valve removed a video game called Sniper: Phantom's Resolution from Steam after users reported that its free demo contained malware.

The secretary of Defense has ordered U.S. Cyber Command to stand down from all planning against Russia, including offensive digital actions, sources tell Recorded Future News.

Pro-Russia group NoName057(16) launched DDoS attacks on Italian sites, targeting airports, the Transport Authority, major ports, and banks

Fake news generated by artificial intelligence and spread on social media is heightening the risks of bank runs, according to a new British study that says lenders must improve monitoring to detect when disinformation risks impacting customer behaviour.

The Sarcoma ransomware group is threatening to leak data stolen from Taiwanese printed circuit board manufacturer Unimicron.

The Sandworm Russian military cyber-espionage group is targeting Windows users in Ukraine with trojanized Microsoft Key Management Service (KMS) activators and fake Windows updates.

A November 2024 RA World ransomware attack on an Asian software firm used a tool linked to China-linked threat actors.