A cyberattack on the French National Agency for Secure Documents (ANTS) website detected on April 15 may have exposed personal information from individual and professional accounts. Officials say exposed fields may include login credentials, names, email addresses, dates of birth, unique account identifiers and contact details, and they have launched an investigation while implementing additional security measures; the incident follows other breaches such as those involving ÉduConnect and the National Bank Accounts File. #ANTS #EduConnect
Category: Cyber Security News
Elon Musk failed to appear for voluntary police questioning in a French criminal investigation into X, which stems from a February raid over allegations the platform produced and distributed child sexual abuse material. French prosecutors said his absence will not halt the case, emphasized the probe aims to bring X into compliance rather than simply punish, and noted materials were shared with the DOJ and state prosecutors; officials in the US, UK and EU have also criticized X after its AI tool Grok was used to create sexual images of non-consenting people, including children. #X #Grok
Microsoft rolled back a recent service update that caused some older Microsoft Teams desktop clients to hang on the loading screen with “We’re having trouble loading your message” errors. The company said its automated recovery system and the reversion resolved the issue and advised impacted users to fully quit and restart Teams to ensure the fix propagates. #MicrosoftTeams #WindowsServer
Microsoft is rolling out multiple File Explorer improvements to Windows 11 Insiders, including faster launch times and performance boosts via a background preloading feature. Fixes for bright white flashes in dark mode, improved explorer.exe shutdown reliability, and a new full‑screen Xbox mode are also being distributed to Release Preview Insiders on Builds 26100.8313 and 26200.8313 (KB5083631). #FileExplorer #Windows11
A British man believed to lead the Scattered Spider collective pleaded guilty in the U.S. to wire fraud and aggravated identity theft for a campaign that stole at least $8 million in cryptocurrency. Prosecutors say the group used SMS phishing, SIM swaps, and MFA-bypassing tactics to compromise corporate accounts across multiple industries; the leader faces sentencing in August 2026. #ScatteredSpider #TylerBuchanan
Backups alone only allow recovery after data loss, but they do not keep businesses operational during outages, leaving organizations exposed to immediate revenue and reputational harm. A comprehensive BCDR strategy—especially hybrid cloud backup with rapid failover—maintains operations, reduces costly downtime, and creates recurring service opportunities for MSPs. #Datto #Kaseya
Microsoft warns that threat actors are increasingly abusing external Microsoft Teams collaboration, impersonating IT or helpdesk staff to trick employees into granting remote access and enabling lateral movement for data theft. The attackers leverage legitimate tools and native protocols—including Quick Assist, signed applications, WinRM, and Rclone—to blend malicious activity into normal IT operations, making detection difficult. #MicrosoftTeams #QuickAssist
Vercel disclosed an incident where attackers gained unauthorized access to internal systems after a third-party AI tool, Context.ai, was compromised and used to access an employee’s Google Workspace account. The company says the impact appears limited, has notified affected users and advised credential and environment-variable rotation while working with Mandiant and…
The UAE Cyber Security Council warned that nearly 25% of publicly accessible files contain sensitive personal data and that 68–77% of privately shared files may also be accessible due to weak access controls or misconfigured sharing settings. The advisory urges stronger practices—such as encryption, strong passwords, two-factor authentication, and careful permission…
India’s top intelligence agency arrested a suspected key conspirator in Operation Chakra-V accused of supplying fraudulently obtained SIM cards to cybercriminal networks. The CBI’s probe uncovered a POS agent-led logistics chain that allegedly procured roughly 10,000 illegally issued SIMs used to bypass identity checks and enable extortion, loan and investment frauds….
GreyNoise research shows that spikes in edge-device reconnaissance often precede public vulnerability disclosures, giving defenders advance notice. The study found a median nine-day warning and linked 104 activity surges to targeted vendors of routers, VPNs, firewalls and other security appliances. #GreyNoise #Cisco
Boost Security released SmokedMeat, an open-source framework that runs live attack chains against CI/CD pipelines to show engineering and security teams exactly how a flagged pipeline vulnerability can be exploited. Starting from a single vulnerability, SmokedMeat deploys payloads, compromises runners, harvests credentials from process memory, exchanges them for cloud access, and maps the blast radius—highlighting risks demonstrated by the TeamPCP campaign. #SmokedMeat #TeamPCP
The European Commission is awarding up to €180 million in cloud contracts over six years to Europe-based providers to boost the EU’s digital sovereignty and provide sovereign cloud services to institutions and agencies. Four vendors were selected through the Cloud III Dynamic Purchasing System against the Commission’s Cloud Sovereignty Framework, with follow-up work including updated assessment criteria and a broader Tech Sovereignty package. #EuropeanCommission #CloudSovereigntyFramework
Meta Bug Bounty and PortSwigger have partnered to help security researchers sharpen their skills, collaborate more closely, and improve vulnerability discovery. The initiative pairs Meta’s bug bounty program with PortSwigger’s Burp Suite to provide tooling, educational resources, and opportunities for engagement. #MetaBugBounty #PortSwigger
Cisco has released patches for critical vulnerabilities in Identity Services Engine (ISE) and Webex Services that could enable remote code execution, root-level access, and user impersonation. Organizations are urged to apply updates immediately because no workarounds exist and the flaws affect widely used authentication and SSO integrations. #CiscoISE #WebexServices…