> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
Cybercriminals look elsewhere to get results, says Kaspersky Lab.
PwC report claims ‘creaking technology’ is no match for determined hackers.
Wandera claims 16 firms have failed to use HTTPS for payment data and PII
Two new cyber espionage campaigns spotted in Middle East
Webroot study finds US firms’ losses way outstrip those of UK companies.
Akamai claims this could be start of a long-term trend
Eset warns of device security risk going into festive party seasons.
Security firm releases new research around a financially motivated threat group targeting credit card data by using sophisticated malware executed before an operating system boots.
The UK’s small to medium-sized business sector is leaving itself wide open to serious cyber-crime risks says insurer.
Kaspersky Lab warns hackers are trying to jump air-gapped networks.
Flexera report claims bundled Flash is to blame.
British pub chain was hit back in June
A full 69% of companies are afraid that migration to the cloud will increase risks of unauthorized access while 43% worry about account hijacking.
Veracode warns of widespread vulnerabilities in PHP, ASP and ColdFusion.
Hackers used cloud storage platform as C&C server in info-stealing attacks.
Songkick apologizes for causing ‘alarm’
The investment shows that prevention is back as a credible cyber-defense strategy.
RiskIQ has teamed up with Facebook to provide a visual interface on top of the social network’s ThreatExchange product.
Price rises and concerns over data loss top of the list.
Eset report finds Russians least likely to use security software.