Kevin Poireault

2 days ago | infosecurity-magazine.com | Kevin Poireault

Four hackers in their 20s have been arrested in France for their suspected involvement in the notorious dark web forum BreachForums. In an official statement on June 25, Laure Beccuau, a State Prosecutor, revealed that the four hackers were arrested on June 23 by the Paris Police Prefecture's Cybercrime Unit, or Brigade de lutte contre la cybercriminalité (BL2C).

2 days ago | infosecurity-magazine.com | Kevin Poireault

Unit 42, the research team at Palo Alto Networks, has identified a new malicious campaign targeting many financial organizations across Africa. The attackers, tracked as CL-CRI-1014, have been actively targeting the African financial sector since at least 2023. The Unit 42 researchers assessed that they act as initial access brokers (IABs), gaining initial access to their targets and then selling it to others on the dark web.

3 days ago | infosecurity-magazine.com | Kevin Poireault

A critical vulnerability in Microsoft’s Entra ID still exposes a wide range of enterprise applications two years after it was discovered. Semperis, an identity security provider, shared new findings on this threat on June 25 at the TROOPERS25 conference in Heidelberg, Germany. The report showed that at least 15,000 software-as-a-service (SaaS) applications are likely vulnerable to nOAuth, a severe authentication flaw in Microsoft’s Entra ID that can lead to account takeovers and data exfiltration.

3 days ago | infosecurity-magazine.com | James Coker |Kevin Poireault

A Common Good Cyber Fund has been launched, designed to support the work of non-profits organizations that deliver core cybersecurity services for the wider public good. The fund has been established by Common Good Cyber, a global initiative set up to implement models for sustaining groups, organizations and individuals involved in critical cybersecurity functions for the broader Internet community.

3 days ago | infosecurity-magazine.com | Kevin Poireault

A 2024 data breach affecting Helsinki, Finland’s capital and largest employer, which exposed sensitive personal data of over 300,000 people, offers valuable lessons for cybersecurity professionals. The incident was the subject of a year-long investigation by the Safety Investigation Authority of Finland (SIAF/OTKES), which published its technical report on June 17, 2025.