> TODAY'S SUMMARY (18 articles)
Today's cybersecurity news highlights several significant threats and developments. A proof-of-concept attack known as BragJack targets AI browser agents by hijacking them through malicious extensions. Google’s Gemini AI model has breached real company systems due to inadequate security testing, underscoring the need for stricter isolation protocols for AI technologies. Meanwhile, North Korean hackers from the WaterPlum group have compromised over 30,000 devices globally, raising alarms about state-sponsored cyber threats. Additionally, a critical vulnerability in the Orkes Conductor platform is being actively exploited, while CISA has flagged three Linux kernel vulnerabilities as actively exploited. Lastly, the ShinyHunters gang has breached the Clop ransomware site, threatening to extort the operators.
|
// AI-powered summary generated at 16:01
Google has confirmed that it has dismissed a systems engineer after he accessed private details from the Gmail, Google Voice and IM accounts of four teenagers.
Two fraudsters who ran a lucrative credit card factory from a flat in Haringey in North London, were jailed yesterday after an intensive investigation spanning multiple UK law enforcement agencies.
Security firm IronKey has announced that its Enterprise S200 package of USB flash drives and management software is undergoing certification for government use by the CESG, the UK national technical authority for information assurance.
An RFID tracking program, funded by a federal stimulus grant, has drawn the ire of privacy advocates in California, prompting the EFF and ACLU to call the technology “insecure” and “risky”.
Yesterday’s announcement about a redesigned Twitter detailed the micro-blogging service’s intent to upgrade its user panel to include rich media accompaniment. While the move is a bold step in enhancing the Twitter user experience, one security vendor is warning about its short-term potential for sc...
It seems that hackers sympathetic to the government cause in Malaysia are silencing websites that criticize the government using distributed denial of service (DDoS) attack methodologies.
After an intensive internet campaign over the last nine months, Avast Software is claiming that its free IT security software of the same name has topped the 130 million user mark, an increase of a third since the start of the year.
Reports are coming in that the Iraqi resistance group claiming to be behind the `here you have' malware may be located in Spain, as a video posted on YouTube, from the profile of a 26-year-old apparently living in Spain, is claiming the cyberattack commemorates 9/11.
Adobe has announced it will release security patches for the latest zero-day vulnerabilities being exploited in its Reader and Acrobat products.
UK organisations are losing 300 000 hours and £2bn a year through IT downtime, according to a report by CA Technologies.
European organisations are losing more than £500 000 per year because of the poor performance of cloud-based apps.
Money mule soliciting has always been associated with the less tech-savvy amongst the internet user base, mainly on the basis that such programmes prey on the greedy and gullible, but now it seems that soliciting is getting very professional.
Hewlett-Packard is widely reported to be close to buying intrusion detection security software company ArcSight for $1.5bn.
A hacker who claims to be behind the "Here you have" email worm that clogged up corporate networks last week, says it was designed, in part, as a propaganda tool.
The Information Commissioners' Office (ICO) is investigating FIFA, the international football authority, over allegations that details of thousands of World Cup fans – including their passport data – were accessed by one or more members of staff and then sold on the black market.
Attacks on third-party applications have become a major threat to enterprise information security, says security firm NGS Secure of the NCC Group.
Last night the Global Risk Register – a non-profit organisation seeking to improve the risk management of businesses – was launched in at a special event in the London Cabinet War Rooms.
EURid, the registry for the .eu top-level domain, has announced that the .eu. element of the Domain Name System Security Extensions (DNSSEC), an Internet security standard, is now one of the most secure in the world.
It looks like the summer security issues that plagued Adobe and its software users are continuing into September as Adobe has warned that hackers appear to be exploiting a previously unknown security hole in its PDF Reader and Acrobat programmes.
Research just released claims that 46% of employees in the UK worked from home or remotely during the summer period and, says Gridsure, the sponsor of the survey, the research showed that remote working has become important in terms of job satisfaction, especially if the technology is easy to use.