> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Archimedes Group boasts of “winning campaigns worldwide”
Europol and US Police Disrupt $100m Cybercrime Gang. GozNym group targeted over 40,000 machines
An outline of the NCSC's approach to understanding the security of Software as a Service (SaaS) offerings.
Cisco released two vulnerability advisories with plans to issue patches.
Forbes.com was hit with credit card skimming malware.
Best of the Web's seal was injected with keyloggers and more than 100 websites are still linked to it.
APP fraud drives major losses for consumers
Supreme Court ruling means decisions made by secret tribunal aren’t final
Executive Order appears to be veiled attempt to disrupt Huawei
The vast majority of security leaders would share threat intelligence, an IronNet report says.
Boost Mobile customers are urged to change their PINs.
Over 80% still have SMB switched on, finds Forescout
Microsoft urges firms to patch as soon as possible
New set of data sampling side-channel attacks discovered
San Francisco could be the first city to ban facial recognition technology.
Trend Micro confirms unauthorized access from third party, though McAfee and Symantec say no evidence of breach.
Asia's largest retailer suffered a breach exposing account information of nearly half a million users
Cautionary tale as credit agency pays heavily for 2017 incident
Group known as “The Community” targeted victims' cryptocurrency
Vulnerability may have been used by government to spy on users