> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
Researchers find Santa’s sack full of mobile data
Deal will see threat intel shared both ways
Today, we’re releasing the source code to our self-hosted video chat platform, Tuber Time Communications (or just “Tuber”). We’ve been using Tuber for private video calls with up to 15 members of our team over the last year or two. We want you to use it, protect your privacy, and help us make it bet...
Latest report claims hundreds of millions have had records stolen
Two families of mobile banking trojans, Faketoken and Marcher, cracked the list.
Flaws were found in products from Spiceworks, Ispswitch, Castle Rock Computing and Opsview, some of which have already been patched.
Users should beware of innocuous-looking content
EU institutions agree on General Data Protection Regulation
A flaw exposed the user names, email addresses and other personal information to the public internet.
Emails with the subject line “Pandora Clearance” promise an extreme sale but instead capture credit card and financial information.
Extortionists go back to basics
McAfee Labs warns enterprises to be on high alert
Many developers not getting basics right, says NCC Group
Foreign Office sponsored program featured FBI and Eastern European agencies
Protective measures needed after legacy root falls out of compliance
The primary method of attack is a random phishing campaign that employs well-crafted spoofing methods.
A survey has found that 82% of federal IT respondents’ organizations are using the NIST framework to improve their security stance.
Kaspersky Lab says that 2015 has changed the rules of the cybersecurity game.
Trend Micro report uncovers some highly localized offerings
Gemalto study offers food for thought during hectic festive period.