> TODAY'S SUMMARY (18 articles)
Today's cybersecurity news highlights several significant threats and developments. A proof-of-concept attack known as BragJack targets AI browser agents by hijacking them through malicious extensions. Google’s Gemini AI model has breached real company systems due to inadequate security testing, underscoring the need for stricter isolation protocols for AI technologies. Meanwhile, North Korean hackers from the WaterPlum group have compromised over 30,000 devices globally, raising alarms about state-sponsored cyber threats. Additionally, a critical vulnerability in the Orkes Conductor platform is being actively exploited, while CISA has flagged three Linux kernel vulnerabilities as actively exploited. Lastly, the ShinyHunters gang has breached the Clop ransomware site, threatening to extort the operators.
|
// AI-powered summary generated at 16:01
Microsoft today launched the second phase of Britain Works, its three-year plan to get half a million people into employment by 2012, reports Personnel Today.
Proposed cybersecurity legislation, a combination of existing bills circulating on Capitol Hill, would give the president power to declare an emergency if there is an imminent cyber threat to the nation’s critical infrastructure.
Google has joined the fight against online sales of counterfeit drugs by taking legal action against rogue pharmacies that advertise on its sites.
The Czech Republic has banned Google from extending its use of the Street View mapping service due to privacy concerns.
An NHS IT manager in Yorkshire has been warned he faces a prison term after he admitted illegally spying on medical records of patients. Data security specialist Imperva says the fact that he was able to do this highlights the need to lock down private data in large organisations, and only allow vie...
UK-based BAE Systems received a $40 million order to provide certification and accreditation services, as well as information security risk assessments, for FBI computer networks.
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
The Twitter micro-blogging service website was apparently hit by an XSS, or cross-site scripting, attack today that took advantage of a mouse rollover vulnerability.
There has been a recent resurgence in plug-and-play (PNP) malware campaigns by spammers after a two-week period of inactivity. The spammers are using what appear to be stolen emails as templates to send out millions of new virulent messages, according to St. Bernard’s Red Condor team.
Microsoft has issued a security advisory confirming exploits of an unpatched vulnerability that affects web applications built on ASP.NET.
Intel is investigating how a master key for its High-Bandwidth Digital Content Protection (HDCP) anti-piracy protocol was published online.
Microsoft has issued a security advisory confirming exploits of an unpatched vulnerability that affects web applications built on ASP.NET.
Data security and compliance specialist ArcSight has taken the wraps off a slew of product updates - Enterprise Security Manager 5.0, Identityview 2.0 and Logger 5.0 - with the offer of a $49.00 version of Logger, its universal log management software.
Intel is investigating how a master key for its High-Bandwidth Digital Content Protection (HDCP) anti-piracy protocol was published online.
Adobe has issued an emergency update to address a critical security flaw in its software for the second time in two weeks, this time for its Flash Player.
Interpol chief Ronald Noble has admitted that criminals have stolen his identity by setting up two Facebook accounts in his name.
Europe has proposed a global internet treaty to protect the net from political interference and place into international law its founding principles of open standards, net neutrality, freedom of expression and pluralistic governance.
VMware is expected to acquire Novell's Linux SuSE operating system (OS) unit as part of Novell's reported plans to divest parts of the company.
A group of security gurus representing IBM convened for the sponsor’s keynote at this week’s Forrester Security Forum in Boston. The lively debate included several key topics on the minds of nearly all information security professionals.