> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Kaspersky Lab claims Arab cyber-mercenaries attacked over 3000 victims
Apple iPhone users will get one-swipe access to their accounts
1 - Rappel des vulnérabilités récentes dans Adobe Flash Player Adobe Flash Player est utilisé principalement par les navigateurs Internet pour afficher du contenu dynamique sur des pages web. Depuis le début de l'année, plusieurs vulnérabilités sur Adobe Flash Player ont été signalées par le...
Researchers find evidence of ‘supra organization’ supplying attack infrastructure
Sheer scale, sophistication and lifespan of the group puts all others in the shade
Le grand écart entre le niveau de la menace et les mesures de protection mises en place sur les infrastructures critiques françaises a-t’il une chance de se réduire en 2015 ?
Plusieurs éléments permettent de l’espérer : la révélation en [...] Lire la suite
Multi-national gang stayed hidden for two years
Most sites were taken offline on Tuesday by unknown attacker
We need to do more to protect ourselves. 2014 overflowed with front-page proof: Apple, Target, JPMorgan Chase, etc, etc. The current, vulnerable status quo begs for radical change, an influx of talented people, and substantially better tools. As we look ahead to driving that change in 2015, we’re pr...
In one week it has worked with Microsoft to stop 6,000 false malware/antivirus detections.
The framework to improve cybersecurity for critical infrastructure in the US has widened cyber-awareness and started a wider conversation.
Going forward, it’s clear that the APT scene will only get more crowded as actors from Russia and Iran come into their own.
HP warns of 'significant deficiencies' in even the newest systems
Vendor claims many apps could put corporate data at risk on BYOD mobiles
The goal is to provide insight into future real and potential cyber-threats so that customers have time to address any vulnerabilities and lower their risk profile.
Google's Eric Schmidt, Cisco, Bell Labs to back the security startup incubator.
The new entity will centralize threat intelligence for use by existing federal agencies, including the NSA, the DHS, the FBI and the CIA.
Cisco spots trojan downloader with a difference in a targeted email attack
Research shows online abuse is growing among children and adult web users
The company was concerned with an increase in suspicious filings using stolen identities to claim tax refunds.