> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. Google is rolling out AI defenses for Android to combat messaging scams and fraudulent calls, aiming to enhance user security.
2. A new election influence campaign is leveraging hyperlocal content to manipulate AI chatbots, suggesting a future trend in political disinformation.
3. Zero-click spyware is being disseminated through targeted online ads, posing significant risks as it can infect devices without user interaction.
4. Cisco has issued a warning regarding an actively exploited vulnerability in its Secure Email Gateway, allowing remote attackers to execute commands with root privileges.
5. The Legal Aid Agency in the UK experienced a severe data breach, with records dating back to 1978 compromised, highlighting the long-term implications of such attacks.
6. Researchers also discovered fake CAPTCHA systems used to facilitate malware downloads, further illustrating the evolving tactics of cybercriminals.
7. Major vulnerabilities were reported in various platforms, including critical flaws in Palo Alto Networks' PAN-OS and Drupal, underscoring the urgent need for patches and updates.
|
// AI-powered summary generated at 20:01
The legislation makes online sexual extortion a federal crime, defined as the use of extortion and threats to coerce sexual activity.
Yet another local authority in data breach blunder
tl;dr While the internet went crazy today, we went fact finding. Here are our notes on Pokemon Go’s permissions to your Google account. Here’s what Jay and I set out to do at around 6pm today: Find what permissions Pokemon Go is actually requesting Investigate what the permissions actually do Replic...
Malware collected payment card information, including cardholder name, credit/debit card number, security code and expiration date.
Similar to CryptoLocker in functionality, Stampado will delete a random file from the victim’s PC every six hours until the ransom is paid.
tl;dr – Tidas is now open source. Let us know if your company wants help trying it out. When Apple quietly released the Secure Enclave Crypto API in iOS 9 (kSecAttrTokenIDSecureEnclave), it allowed developers to liberate their users from the annoyance of strong passwords or OAuth. That is, if the de...
Capgemini claims consumer goods firms need to tighten security and privacy
Software maker releases fixes for 80+ bugs
Gloves Goggles Checkered body suits The representation of hackers in stock media spans a narrow band of reality between the laughable and the absurd. It overshadows the fact that lots of hackers are security professionals. They may dress differently, but they serve a critical function in the economy...
Nymaim is using phishing and has now made its way to South America, with attacks targeting financial institutions in Brazil.
The cultural phenomenon has already become a criminal’s present on a platter, because it collects a scary amount of personal information.
Il y a deux ans un collègue allemand me recommandait l’ouvrage Black Out de Mark Elsberg, à l’époque disponible uniquement en Allemand. Je l’avais acheté en audio book pour pratiquer mon allemand dans le TGV, ce qui était très optimiste [...] Lire la suite
The back-and-forth in the security community over HummingBad's DNA continues.
Symantec has announced that Michael Fey is to join the company as President and Chief Operating Officer.
As Pokémon fans try to ‘catch ‘em all’ with new GPS-based augmented mobile game Pokémon Go, several security issues have reared their heads as the popularity of the app continues to skyrocket
Most scam IP addresses linked to Nigeria
Government accelerates push to make Britain global leader on the roads
Report finds 77% of UK CIOs believe lack of skilled security staff will lead to more security threats
Lastline research at Infosecurity Europe reveals IT pro concerns
Bugs could allow users to impersonate councillors