SFR, THE 2ND FRENCH TELECOM OPERATOR, HIT: CUSTOMERS’ DATA STOLEN
SFR Fiber business was compromised last July 2. Among users’ stolen data are identity and technical data.
US AGENCIES GIVE WARNING ON POSSIBLE CYBER ATTACKS AGAINST INDUSTRIAL SYSTEMS
The alert concerns some SIEMENS controllers used to monitor and pilot infrastructures as water distribution and energy.
SOLIMUT A FRENCH MUTUAL INSURANCE SUFFERS A BIG DATA LEAK
A new French mutual insurance company has been hit by a cyber attack. Solimut confirms a personal data breach. The hacker claims to have stolen over 1.2 million policyholder records and 770,000 bank details. According to the hacker himself, the leak would involve more than 1.2 million insurance records containing social security numbers, 770,467 bank accounts with IBAN and BIC, nearly 3 million postal addresses, and over a million salary statements.The data table would be particularly worrying: it supposedly puts on the same line the name, social security number, date of birth, phone number, email address, and IBAN of 228,000 people. Combined, this information is especially usable for targeted phishing campaigns, identity theft, or financial fraud. However, this information is not confirmed at this stage.
ROYAL AIR FORCE NETHERLAND SIGN A FRAME AGREEMENT WITH ESET
The Dutch Royal Air Force and ESET Nederland today signed a letter of intent to further strengthen their cooperation. In doing so, both organizations are laying the foundation for broader collaboration around people, knowledge, and specialized cybersecurity expertise, with the shared goal of strengthening the digital resilience of the Dutch Armed Forces and the Netherlands as a whole. The partnership builds on the recently concluded government-wide framework agreement with the national government for cybersecurity services. This agreement enables Dutch government organizations to access cybersecurity services of European origin under clear, secure, and responsible conditions. It also supports the government in reducing dependencies, diversifying risk, and opting for sovereign and autonomous European technology.
OPENAI AND OTHERS CALL FOR ‘COLLECTIVE ACTION’ ON CYBER DEFENSE
OpenAI, several of its competitors and large corporations signed onto an open letter urging the industry and the government for collective action around securing AI systems. The group proposed three principles for collective cyber defense: Recognize that status quo security won’t be enough, empower more defenders with cyber-capable AI and mobilize a collective response. “Each of us can reduce risk now. All organizations, cybersecurity companies, technology partners, governments, and AI frontier companies have an important role: accelerate defenders’ priorities with tools, funding, and hands-on support, especially for critical infrastructure organizations with limited budgets,” the letter said.
The letter calls for measures that are easy to write but harder to do, such as for governments to “coordinate cyber defense at local, national, and international levels.” The group said every organization ought to “make cyber defense an immediate leadership priority” and raise security standards, fix the highest-risk weaknesses and “use capable, lower-cost models for broad coverage and apply frontier capabilities for the hardest problems.” Among the 116 signatories are a slew of cybersecurity and networking heavy hitters including Abnormal, Broadcom, Cisco, Cloudflare, Palo Alto Networks, Snyk, Tenable and ZScaler as well as hyperscalers AWS, Google and Microsoft. A large part of them were members of the GLASSWING project, which so far doesn’t seem to have produced many concrete effects.
