> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
US singer now has a .adult and a .porn name
Hackers could have reward points sent as cash to prepaid credit cards or transferred to other Hilton Honors accounts.
IRAM2 is meant to help businesses identify, analyze and treat information risk throughout the organization.
Hacktivists post names and addresses of 100 personnel
China is going through with a plan to force tech vendors to fork over source codes and use Chinese encryption.
As it migrates to English-speaking regions, VaultCrypt's use of a sophisticated payment site and unusual ransom method sets it apart.
Katz used cyber-spying to prey on those looking to sue for personal injury after traffic accidents.
Greatfire.org appeals for help to manage 2500 times increase in traffic
Gregory Enriquez plans to focus on defense-in-depth for the data-breach era.
As the social network joins the payments fray, it's clear that the system is exciting and useful to everyone—including criminals.
Hackers accessed information to commit financial and medical fraud, and get potentially sensitive information about medical conditions.
Drugs marketplace goes offline as rumors swirl of exit scam
As a new fellow, (ISC)2 contributed to the latest briefing to members of the Congressional Cybersecurity Caucus.
Ramzan has a deep background in machine learning and cloud security.
Gullible users are actually infected with trojan
Encrypted comms firm releases long list of affected software
The main culprit is a rise in unpatched and designer vulnerabilities: more than 9,200 new flaws in Q4 alone.
FunCaptcha replaces these standard tests with interactive, quick mini-games to more accurately detect real humans and stump bots in what its creators say is less than 10 seconds.
The TeslaCrypt ransomware is taking aim at a virtual who’s who of online gaming, from Call of Duty, to Skyrim to Minecraft.
Iron Mountain claims lack of experienced staff is hindering best practice efforts