כותרות מ-16 מקורות מובילים ומערוצי טלגרם, מתעדכן אוטומטית. כל כותרת מקשרת לכתבה המלאה באתר המקור או לפוסט בטלגרם.
161 כתבות
בהמשך לדיווח הקודם שהבאתי כאן מוקדם יותר היום. קבוצת התקיפה הרוסית Hitcore טוענת כי היא עומדת מאחורי הפריצה לאפליקציית ההתרעות האוקראינית והפצת התרעות שווא על סכנת קרינה, מתקפה כימית וירי טילים לעבר קייב. לפי ערוץ הטלגרם הרוסי Mash, נציגי…
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three…
Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that…
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a…
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]
Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how…
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
The latest "Digital Defense Report" identifies government agencies as prime targets for AI attacks but doesn't mention that they are broadly being targeted through Microsoft bugs.
Last week, an often-ignored&#;x26;#;xc2;&#;x26;#;xa0;TCP option, introduced in 2020, made the news due to a new vulnerability in Linux&#;x26;#;39;s implementation (RFC&#;x26;#;xc2;&#;x26;#;xa0;8684, &#;x26;#;xc2;&#;x26;#;xa0;CVE-2026-98432)
A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new idea in the cybercrime world — cast a wide net, steal…
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026. According to a report published by…
Armadin found 88% of critical and high findings in its client tests fell outside vendor advisories
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.
Apple does not attribute attacks or the notices to specific malicious actors or geographical regions, the notification said, due to the “extreme cost, sophistication, and worldwide nature of mercenary spyware attacks [which] make them some…
A popular Ukrainian air raid alert system was hacked over the weekend, prompting a cyber group to breach a similar Russian system in retaliation.
A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed temperature settings on freezers and cooling systems. [...]
Three weeks after the attack that turned refrigeration units in French supermarkets into ovens overnight, similar cyberattacks have hit shops in other European countries and again caused refrigerated food to be spoiled. Belgium, Luxembourg…
Organizations in the region face attacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.
Bitter used three infection chains against South and Southeast Asian targets, one with no malware executable
Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB5127648 Windows 11 security update. [...]
Hackers accessed its online shopping platform and stole customers’ personal and payment card information.
The top payout is for high-impact architectural research demonstrating full administrative control.
Supermarket and grocery store refrigerators across Europe appear to have been hacked early Monday — the second such incident in recent weeks where attackers have manipulated temperature controls and caused stock to spoil.
A Trezor Safe 5 sold by CryptoBilis, the reseller linked to the recent Ledger wallet drains, may contain a hidden implant that steals the owner’s recovery phrase, Trezor has warned. Trezor is a Czech company and part of SatoshiLabs Group.…
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
Cryptocurrency Exchange Binance blamed a compromised DevOps laptop for the loss of $6.3 billion in cryptocurrency last week, adding that it will now cover any losses faced by its customers. “Binance will cover all losses from the Secure…
A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you…
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports…
שתי החולשות החדשות הן במוצר Connect Secure, והם נוצלו יחד עם חולשה שלישית שפורסמה כבר לפני כשבועיים. ביחד, הם אפשרו לתוקפים להשיג הרשאות ניהולעל שרתי VPN ללא צורך בהזדהות. שתי החולשות החדשות הן CVE-2026-111357 ו-CVE-2026-118527, שמצטרפות…
Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is unrelated to the recent Binance hack. What was accessed? In October, the…
A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to…
Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State of AI in Security Operations 2026 survey of more than 250 CISOs, SOC leaders and…
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
עוד רבעון חלש לצ'ק פוינטנפתח בכרטיסייה חדשה, עם שחיקה בכל הפרמטרים. ההכנסות עמדו על 670 מיליון דולר ברבעון השלישי של 2026, מה שמשקף ירידה הן מול הרבעון המקביל והן לעומת הרבעון הקודם. גם ברווח התפעולי נרשמה ירידה, ל-177 מיליון דולר לפי כללי…
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged…
בהמשך לדיווח הקודם על דלף מידע של כ-92 אלף לקוחות Japan Airlines, מתברר שהאירוע בחברת Amadeus הספרדית, המספקת מערכות להזמנת טיסות, הנפקת כרטיסים וצ'ק-אין למאות חברות תעופה ברחבי העולם, משפיע על חברות נוספות. חברת ANA היפנית מדווחת על דלף…
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto…
רשתות המזון השוודיות ICA ו-Coop (מי כאן זוכר את הסיפור של Coop ו-Kaseya?) מדווחות על תקלות חריגות במערכות הקירור וההקפאה במספר סניפים. באחת החנויות דווח כי הטמפרטורה במקררים ובמקפיאים הוגדרה ל-50 מעלות בעקבות מתקפת סייבר. חלק מהחנויות…
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist
North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of Korea (North…
“Yesterday’s price is not today’s price,” a phrase Fat Joe popularized in 2021, reminds us that what worked yesterday may not deliver the same value today. In cybersecurity, this matters when we continue to assess employees against…
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.
Chainalysis reveals AI-driven attack that led to unauthorized activity
A pull request adds a helpful setup step for an AI coding assistant. No application source changes. The description calls it a developer-experience improvement, and the reviewer sees a short configuration file beside some Markdown…
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Equifax CISO Jeremy Koppen sees the same dynamics most security chiefs are facing: hackers on the one side using AI to perform more sophisticated attacks at unprecedented speed, and defenders on the other adopting AI to match that volume…
חוקרי החברה זיהו פעילות של תוקף המשתמש במערכת ARTEX ובאוסף של כלי AI שונים, הכולל כלים לאיתור חולשות, כתיבת קוד לניצול החולשות ועוד. התוקף מפעיל את התשתיות שלו משרתים בהונג קונג, ולפי החוקרים הצליח לפגוע בכמה מלקוחות החברה באמצעות מתקפות…
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
חברת Sophos מפרסמת מחקר על פעילות קבוצת הכופר Aur0ra, שמשתמשת בסוכני AI באמצעות Cursor ובמודלים של Anthropic, xAI ו-Moonshot כדי לבצע חלק משמעותי משרשרת התקיפה בתוך רשתות של ארגונים. לפי המחקר של סופוס, התוקפים סיפקו למודלים פרטי גישה שכבר…
הרשויות באוקראינה דיווחו אתמול (ראשון) על פריצה למערכת ההתרעות מפני טילים ואיומים בעקבות מתקפת סייבר. תושבי קייב קיבלו התרעות שווא על מתקפה כימית, על קרינה ועל לחימה ברחובות עיר הבירה. במדינה האשימו את רוסיה, שדיווחה בעצמה על פריצה למערכת…
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team…
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity…
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device.…
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical…
The FBI and U.S. Secret Service alleged this weekend that North Korean hackers were responsible for stealing more than $6.3 billion from cryptocurrency platform Binance last week.
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
8,832 קרבנות פורסמו מתחילת השנה באתרים של קבוצות הכופר השונות. יש עוד חודשיים עד סוף 2026 אבל כבר עברנו את כמות הקרבנות שהייתה בכל שנת 2025.... (8,227 קרבנות). בהשוואה לתקופה מקבילה אשתקד (ינו'-אוק') מדובר בעליה של כ-34%, ובעליה של כ-100%…
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible…
OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]
חודש הקניות כבר כאן. הבינה המלאכותית יכולה לעזור למצוא מבצעים, אבל גם להפוך אתרי קניות מתחזים למשכנעים יותר. אז לפני שממלאים את העגלה, עוצרים לבדיקה בודקים איפה קונים. נכנסים ישירות לאתר או לאפליקציה הרשמית ובודקים מי עומד מאחורי החנות.…
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's…
Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside…
חברת Northflank, המספקת פלטפורמת ענן להרצת אפליקציות ושירותי AI, מדווחת כי בעקבות אירוע סייבר, מספר לקוחות זיהו שימוש בלתי מורשה במפתחות API שלהם לשירותי AI שונים. החברה פרסמה אזהרה לכל הלקוחות לפיה עליהם להניח שכל הסיסמאות שנשמרו…
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure…
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10…
חברת Chainalysis מספקת כלים לניתוח עסקאות קריפטו ומשמשת בין היתר רשויות אכיפה ומוסדות פיננסיים, מדווחת כי תוקפים השתמשו בסוכני AI כדי לחדור למערכות ולכלים פנימיים של החברה. התוקפים השיגו גישה למידע של לקוחות, כולל שמות מלאים, כתובות מייל…
בכל זאת, גניבת הקריפטו הגדולה בהיסטוריה. חלק מהפרטים הטכניים שפורסמו מספרים כיצד הצפון-קוריאנים הצליחו לגנוב כ-6.3 מיליארד דולר.... לפי החקירה הראשונית של Binance, נראה שהתוקפים הצליחו להשתלט על מחשב נייד של איש DevOps בחברה, ומשם להגיע…
במערך הסייבר הלאומי מתקבלים דיווחים על שיחות באנגלית המתחזות להתרעת אבטחה של גוגל. בהודעה נטען שמספר הטלפון בחשבון השתנה ושהפעילות מקורה בטהראן, איראן. אל תתנו להודעה המלחיצה לגרום לכם לפעול ללא בדיקה. עצם קבלת השיחה אינה הוכחה שהחשבון…
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by…
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI…
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...]
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized…
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
YARA-X&#;x26;#;39;s 1.22.1 is a bugfix version, it brings 2 bugfixes.
YARA-X&#;x26;#;39;s 1.22.0 release brings 11 improvements and 9 bugfixes.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The…
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported…
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…
One platform or four Your WAF renewal is coming up. The API team has its own tooling in mind, the fraud team wants a bot product, and someone in networking owns DDoS. Four controls, four consoles, four sets of policies in front of the same…
The cybersecurity market is difficult to predict, but a glimpse into the annual DataTribe Challenge shows what's trending and what's not.
Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk…
The DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from Character.AI can be sold and under what terms.
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same.
The identity landscape you’re responsible for looks nothing like it did just a few years ago. Employees and contractors now share the enterprise with service accounts, machine identities, and a fast-growing population of AI agents — all…
CrowdStrike confirms post-exploitation at nine, including deployment of BLOODALCHEMY malware. AI agents ran parallel attack paths under human direction. Full story
RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems
I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing…
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
החברה דיווחה לבורסה בארה"ב כי תוקפים השיגו גישה למערכות החברה וייתכן שגנבו מידע של לקוחות, כולל שמות, פרטי קשר, מספרי כרטיסי אשראי ועוד. האירוע לא גרם להשבתת שירותים או לפגיעה בפעילות העסקית.
Linux servers running Multipath TCP (MPTCP) could be vulnerable to remote code execution through a flaw in the kernel’s networking stack. Anthropic has disclosed a zero-click exploit developed with an unreleased Claude research model that…
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations
Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit
A trillion-parameter AI model that its developer says could help attackers carry out real cyberattacks is now free to download, modify and run outside the developer’s control. Mistral AI released the open weights of Mistral Large 4, which…
The first hours after a serious cyber incident are filled with activity. Security starts investigating, IT works to contain the impact, legal begins assessing potential obligations, and executives want to know what happened and what the…
Something shifted in offensive security over the last eighteen months that most organizations haven’t fully absorbed yet. It isn’t that attackers got smarter. It’s that the economics of attack changed entirely — and those of us who run red…
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called it the largest cyberattack ever to hit the NHS in England. At least 80 of…
The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
מחקר של חברת הסייבר הישראלית Pluto Security מדווח על 31 מודלים זדוניים שפורסמו ב-HF, ושהורדו בסה"כ כ-32,000 פעמים. הקוד הזדוני ניצל את המעבדים הגרפיים של המשתמשים לכריית מטבעות קריפטו, ובחלק מהמקרים גם פתח גישה מרחוק לתוקפים. המחקר המלא…
The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high…
In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus Labs highlighted evidence of efforts to pre-position access within what it described as “strategic communications,…
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation workforces on modern risks and emerging…
As artificial intelligence squeezes early-career learning opportunities, capture-the-flag contests could be one way to help pick up the slack.
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices. The…
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend.
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries
CREST has published a framework for strengthening cyber resilience across financial services
Akamai research reveals that scam detections topped six million in Q2 2026
The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with key security features turned off.
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&#;x26;#;39;s convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some…
Introduction
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
אחרי חודשים של היערכות ועבודה מאומצת, מערך הסייבר הלאומי ושותפיו פועלים יחד להגנה על המערכות הקשורות לתהליך הבחירות, כדי לסייע בשמירה על מהלכו התקין. ראש מערך הסייבר הלאומי, תא״ל (במיל׳) יוסי כראדי, היום מחמ״ל המערך בכנסת, על ההיערכות ועל…
Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden…
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this…
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation…
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal…
PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to…
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected…
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations…
מערך הסייבר הלאומי וועדת הבחירות המרכזית הכריזו על מבצע להגנת המערכות הדיגיטליות התומכות בתהליך הבחירות. ההכרזה באה בתום פגישה של ראש המערך, יוסי כראדי, עם יו״ר ועדת הבחירות המרכזית, השופט נעם סולברג, ועם מ״מ מנכ״ל הוועדה, עו״ד דין ליבנה.…
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime…
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times…
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive…
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has…
בימים האחרונים התקבלו במערך הסייבר הלאומי דיווחים על שיחות ומסרונים שמטרתם לדלות מידע אישי ופרטי חשבון. בחלק מהמקרים ההודעה מופיעה בתוך שרשור שנראה לגיטימי, טוענת לניסיון התחברות חריג ומפנה למספר טלפון שבו מתחזה מבקש פרטי דוא”ל, חשבונות…
דוח ההגנה הדיגיטלית החדש של Microsoft מציב את ישראל במקום השני בעולם והראשון במזרח התיכון במדד מתקפות הסייבר. הנתונים ממחישים את עוצמת האיום שעמו מתמודדת ישראל, אך גם את חשיבותו של החוסן הלאומי: היכולת להגן על אזרחים ושירותים חיוניים,…
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest,…
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and…
בעידן הסייבר, הסוכן הזה לא חייב להיות בן אדם. הוא יכול להאזין, לאסוף מידע, לשבש מערכות, להטעות ואפילו לסייע לתקיפה. אבל אז מגיעה ההחלטה הקשה: מתי ממשיכים להקשיב, ומתי מפעילים את היכולת, בידיעה שברגע שפעלת, ייתכן שגם חשפת אותה? בפרק השני של…
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit…
התקבלו דיווחים על הודעות הכוללות קישור לאתר המתחזה ל-Booking, ובהן בקשה לאשר הזמנת מלון. בחלק מהמקרים ההודעות כוללות פרטי הזמנה אמיתיים, כמו תאריכי שהייה ומספר הזמנה, דבר שעלול להגביר את אמינותן. מומלץ לא ללחוץ על הקישור שבהודעה. לבדוק את…
״בלי ירייה אחת״ הוא הפודקאסט החדש של מערך הסייבר הלאומי, שבוחן איך נראית מלחמה בעידן הסייבר והבינה המלאכותית, אבל גם איך מדינה נערכת אליה, בונה יכולות הגנה ומחזקת את החוסן שלה מול האיומים המשתנים. בפרק הראשון, שי גל מארח את תא״ל (במיל׳)…
בכירי ובכירות תעשיית הסייבר הישראלית, שהתכנסו היום למפגש מיוחד עם ראש מערך הסייבר הלאומי לרגל השנה החדשה, משתפים בתחזיות שלהם לשנה שבפתח. מה יהיו האיומים, האתגרים והמגמות שיעצבו את מרחב הסייבר בשנה הקרובה? צפו בסרטון 👇 שנה טובה ובטוחה…
על רקע ההתפתחויות המדאיגות ביכולות ה-AI לבצע תקיפות אוטונומיות, כינס היום ראש מערך הסייבר הלאומי לרגל ראש השנה את בכירי תעשיית הסייבר הישראלית למפגש מיוחד שבו הציג את כיווני ההיערכות לשנים הקרובות, בהם הקמת יחידת התערבות לאומית לאירועי…
שימו לב דוחות בודקים רק באתר הרשמי של המשטרה. יש לחסום את השולח ולמחוק את ההודעה. אם הזנתם פרטי אשראי, יש לפנות בהקדם לחברת האשראי.
קיבלתם הודעה או קישור שנראים כאילו נשלחו מרשות המסים, וזה נראה לכם חשוד? לפני שלוחצים או מוסרים פרטים, בודקים. רשות המסים, בשיתוף מערך הסייבר הלאומי, מפעילות מערכת לאימות קישורים והודעות חשודים, שתאפשר לכם לבדוק האם ההודעה או הקישור…
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the…