> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several significant threats and trends. An ongoing campaign involving malicious npm packages, particularly the 'indexed-btree,' demonstrates how attackers can evade supply chain defenses by embedding harmful code in normal runtime behavior. In a notable incident, an AI-generated report mistakenly identified weapons on a Chinese ship, nearly escalating tensions between the US and China. Additionally, researchers successfully escaped OpenAI's Codex sandbox, exploiting vulnerabilities to execute commands on the host machine, although these have since been patched. Lastly, Cisco has addressed a 0-day vulnerability in its email gateway, while the Revolut data breach continues to unfold, involving impersonation of a government agency.
|
// AI-powered summary generated at 16:01
Advanced intelligence capabilities are crucial for organizations to stay one step ahead of cyberthreats, advised Rick Howard, general manager of VeriSign iDefense.
The International Organization for Standardization (ISO) has unveiled two new records management standards for storage and disclosure of corporate information.
The dangers of reporting on matters of a darker nature in the world of IT security were thrown sharply into focus today when security researcher Brian Krebs revealed he had experienced a sustained DDoS attack on his news servers.
A Freedom of Information request has uncovered more than 150 breaches of the UK Data Protection Act (DPA) since 2008 at police departments, city and county councils, and hospitals in Norfolk and Suffolk, England.
Salaries for data security analysts are predicted to rise 6% in 2012, while IT salaries overall are expected to increase 4.5% next year, according to research by Robert Half Technology.
Russian hackers are reported to have been behind an attack on a water utility station in Springfield, Illinois, earlier this month, destroying a pump after gaining unauthorized access to the system.
F-Secure’s research team claims to have discovered a recode of the Spitmo malware for the Symbian smartphone platform.
Close to one-third of companies are archiving email on free webmail services such as Gmail and Hotmail, which exposes potentially sensitive information in those emails to breaches.
Skype users are being warned about a phishing campaign designed to harvest their PayPal account credentials.
Facebook is investigating a huge wave of spam attacks that have caused violent and pornographic images to be posted on some users’ profile pages.
EURid, the .eu top level domain registry, has taken the wraps off a new service for internet registrars that simplifies the signing and managing of .eu domain names enabled for the Domain Name System Security Extensions (DNSSEC) enhanced hosting facility.
Reports are coming in of a major data theft involving a range of Norwegian organizations in the country’s oil, gas and defense arena. Unconfirmed reports suggest that the cyber-espionage case may the biggest in European history.
The Q3 security threats report from Kaspersky Lab claims that all manner of new and varied threats are now heaving into view on the threats horizon. Threats such as hidden malware in QR codes all the way to targeted attacks on major firms are the latest problems on the internet, the security vendor...
As the ongoing furore over the relaxation of security at UK border crossings continues with politicians name-calling the UK’s border control agency, a leading biometric and border control specialist says that more needs to be done behind the scenes to boost the UK’s security.
Sutter Health, a healthcare system in northern California, reported that an unencrypted laptop containing personal information on more than four million patients was stolen from its Sacramento offices.
Researchers from Carnegie Mellon university – in partnership with Google - have developed a Windows application that can scour the internet, comparing images found online with a submitted picture, and identify you within 60 seconds.
With MastercCard having just reported a surge in mobile payments (31% of Russians have used this technology), ISACA has issued a white paper looking at the security risks involved and offering guidance for IT security professionals.
Lieberman Software says it expects to see more case of cyber espionage after French energy giant EDF was fined €1.5m for hacking into Greenpeace computers to download the environmental group's plans to block four planned nuclear power plants in the UK.
Small and medium-sized businesses (SMBs) do not consider themselves targets of cyberattacks, and thus are not implementing safeguards to protect their information, a Symantec survey concludes.
White Hat events are pleased to announce that they have now exceeded £500k in their fundraising activities in support of ChildLine/NSPCC.