> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
DD4BC suspect arrested and evidence seized
Site owners didn’t contact users after September attack
Now that the new year is upon us, we can look back and take assessment of 2015. The past year saw Trail of Bits continuing our prior work, such as automated vulnerability discovery and remediation, and branching out into new areas, like secure self-hosted video chat. We also increased our community...
The intent is to confuse search engine bots and erroneously impact page rankings for thousands of sites, for mass web defacement.
59% of the Android mobile finance apps tested had at least three Top 10 risks, whereas a full 100% of the iOS apps tested had at least three.
We’re excited to announce our financial support for Let’s Encrypt, the open, automated and free SSL Certificate Authority (CA) that went into public beta on December 3. With so much room for improvement in the CA space, Let’s Encrypt offers a refreshing, promising vision of encrypting the web. Expen...
A group of malware is targeting government websites in Asia, using watering-hole methods and spear phishing.
Trend Micro says distracted police and lax laws are to blame
Today, we’re releasing the source code to our self-hosted video chat platform, Tuber Time Communications (or just “Tuber”). We’ve been using Tuber for private video calls with up to 15 members of our team over the last year or two. We want you to use it, protect your privacy, and help us make it bet...
Onur Kopçak gets 135 years to add to his previous 199
New study claims few are ready for GDPR compliance
Spymel infects the targeted system through spammed email, spies on all user activity, and relays it to the attacker.
There has been a concerning uptick in both the number and severity of attacks against financial institutions that involve extortion.
Car maker in security push
According to the Mobile Ecosystem Forum, 36% of consumers say that lack of trust is the No. 1 reason they decide against mobile apps.
Tuesday 12 January will see many versions left exposed to attackers
Fake emails are claiming to be delivering legitimate WhatsApp content.
The device's security relies on an 8-digit password which is easily brute-forced, allowing full unauthorized access to the user’s network.
Malware sold to developers keen to guarantee app installs
William Binney will warn committee reviewing controversial draft snoopers’ bill