> TODAY'S SUMMARY (3 articles)
Today's cyber news highlights significant threats and trends impacting the cybersecurity landscape. CrowdSec reported a breach where an attacker accessed and copied 170 private GitHub repositories using an ex-employee's account, emphasizing risks related to insider threats and account management. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild and a continued focus on securing open-source software. Meanwhile, Flock is facing a decline in contracts for its license plate readers, leading to voluntary severance offerings for employees, showcasing the impact of public sentiment on technology adoption.
|
// AI-powered summary generated at 08:00
An anonymous researcher has posted a proof-of-concept attack that fakes a trusted root certificate on the iPhone. Researchers have confirmed that the attack works, making it possible for anyone to create a web page that is deemed to be trusted by Apple.
Websites for 49 members of the US House of Representatives were hacked shortly after President Obama’s State of the Union address last Wednesday night. The attacks appear to have been carried out by the Red Eye Crew according to researchers at security consultant Praetorian Security Group.
International research just published claims to show that a growing number of organisations are having to invest heavily in IT systems in order to comply with data management requirements.
A new tool released by privacy advocacy group EFF is designed to help users find out how identifiable their web browsers are online.
Facebook was plagued by security and privacy issues both real and imagined in the last week, as a real-life worm battled with an imaginary one in a competition to see which could petrify the service's users the most.
PricewaterhouseCoopers has lost the personal records of 77 000 former and current public employees of the state of Alaska, it emerged this week.
George Hotz, the first iPhone cracker – and who reportedly spent more than 500 hours developing the first jailbreak application for the Apple's iPhone back in 2007 – has apparently cracked the Sony Playstation 3.
The oil and gas sector has been the hardest hit by stealthy infiltration, according to a report from the Center for Strategic and International Studies (CSIS). The sector was hit by stealth attacks 17% more than the cross-sector average, with almost three oil companies in four having had hackers fly...
A legal case filed by a bank against a customer in the US promises to test the liability of customers in the event of security breaches. Dallas, Texas-based PlainsCapital bank is suing a business customer, Hillary Machinery, for not taking adequate measures to protect its banking details.
The website of the Oklahoma Tax Commission was the apparent victim of a hack yesterday, one in which visitors to the website were prompted to accept an Adobe license agreement and download software. The hack could not come a worse time for the Commission, whose site is undoubtedly experiencing an up...
An annual report from security software provider Intego acknowledges it was a busy year for security threats to Apple devices, including the Mac OS X and iPhones. And while the Mac OS may be a less frequent target of malware authors, security threats to Apple products are proliferating as these devi...
Many voice encryption products currently available are hackable through the use of a trojan being planted on the host PC, an IT security researcher has claimed.
Technology pundit site TechCrunch was victim of a hack over the weekend by attackers who defaced it, just days before Apple's release of its tablet device – arguably the most anticipated product in recent history.
Recent reports indicate that IT spending is set to increase in 2010. This comes on the heels of 2009, which saw negative IT spending growth worldwide and may have been the worst year on record for IT spending.
Kaspersky Lab has posted an advisory on its site about a false positive with its anti-virus software, apparently being tripped by Google's Adsense software.
Next week the Office of Fair Trading (OFT) is kicking off a month-long campaign to increase awareness of online and offline fraud amongst businesses and consumers.
Kaspersky provoked a flurry of complaints from irate users after its anti-malware tool began blocking sites with Google advertisements yesterday.
Cloud Engines has developed a device that turns up to four USB-connected external hard drives into a cloud-accessible data storage resource, allowing anyone with the right credentials to access the data on the drive.
Anti-virus company ESET has discovered what it thinks is a prank gone wrong. The company suspects that Win32/Zimuse, which has swept the US, was originally intended as a localized malware attack against a group of Slovakian bikers.
Hydraq, the trojan delivered by the Operation Aurora attackers, uses VNC techniques to stream live video from victims' machines, said Symantec in an analysis of the malware.