> TODAY'S SUMMARY (2 articles)
This week in cybersecurity, Cisco issued critical patches for a zero-day vulnerability in its email gateway that had been actively exploited. Additionally, the Revolut data breach came to light, revealing unauthorized access and the impersonation of a government agency as part of the attack. The incident underscores the ongoing threat of social engineering and phishing tactics. Furthermore, the latest Security Affairs newsletter highlighted various security trends and articles, emphasizing the importance of staying updated on emerging threats. Overall, organizations must prioritize patch management and employee training to mitigate risks from both technical vulnerabilities and human factors.
|
// AI-powered summary generated at 12:00
A leading IT security researcher claims that hackers are now electronically breaking into US car dealerships – not to steal cars, but the IDs and other credentials of car purchasers, most of whom buy on finance.
The ATM industry association – the ATMIA – has published a best practice manual on cash machine security. And a new feature of its recommendations is for developers to help prevent reverse engineering of cash machine software.
The UK's Ministry of Defence has once again demonstrated its lack of understanding of how Adobe PDF format files function as, according the Daily Star tabloid newspaper, anyone with a simple knowledge of page formatting can 'unblack' apparently censored data from a release on radar defense issues on...
Reports that air traffic control data has been found on network kits sold on eBay comes as no surprise, says Philip Lieberman, president of Lieberman Software.
Rumors of a series of German government-developed spyware trojans have been bouncing around for several years, but now the Chaos Computer Club (CCC) claims to spotted one in the wild.
Context Information Security has warned of a back door threat to the Apache platform that could allow unauthorized access to internal or DMZ systems.
Now into its 15th year, the COBIT 5 framework is in the final stages of ratification by ISACA and, as part of this evolution of the GRC (governance, risk and compliance) framework, the association has issued a new process assessment model.
A class-action lawsuit for $20 million has been filed against Stanford Hospital & Clinics over a patient data breach in which personal information on 20,000 emergency room patients was posted on a public website for a year.
Check Point has taken the wraps off its 33rd software blade technology, which is an anti-botnet platform designed to counter the problems of botnets and advanced persistent threats (APTs).
A ÂŁ30 graphics card can now process as many as 158 million passwords a second
Plusnet, the Sheffield-based ISP, has announced it is migrating its several million customers from their existing IronPort based anti-spam / anti-virus email security platform and over to a new solution provided by Cloudmark.
Almost half of organizations said their IT staffs are not ready to adopt the cloud, with data security cited as a top concern, according to survey sponsored by Symantec.
Hard on the heels of reports that data on Betfair's 3m-plus customer base had been hacked by cybercriminals in the Far East, reports are now saying that the the betting exchange's security chief has left the company.
The interconnected nature of the global internet was highlighted earlier this week when a DDoS attack on a Californian company also downed Vodafone New Zealand's international web access.
It it with deep regret that Infosecurity has to report that Eugene Schultz – arguably one of the founding figures of the IT security industry – passed away on Sunday after a short illness.
Another primarily SIEM firm is about to fall off the radar, as McAfee announced plans to purchase security information and event management (SIEM) provider NitroSecurity.
Academic tenure discourages educational investment in cybersecurity innovation, Paul Barford, a computer sciences professor at the University of Wisconsin-Madison, as well as the chief scientist at cloud security specialist Qualys, told the Security Innovation Network (SINET) summit at the Massachus...
Today IBM made two announcements regarding its security business: the planned purchase of Q1 Labs and its intent to establish the IBM Security Systems division.
The East Surrey Hospital has admitted it lost the details of around 800 patients on unencrypted memory stick in September of last year. The revelation was made in the Surrey and Sussex Healthcare NHS Trust's annual report.
According to security researcher Brian Krebs, phishers and cybercriminals have been casting an unusually wide net of late, sending out huge volumes of fraudulent email designed to spread password-stealing banking trojans. And, he reports, judging from the number of victims that have reportedly costl...