> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
1 - Rappel des vulnérabilités récentes dans Adobe Flash Player Adobe Flash Player est utilisé principalement par les navigateurs Internet pour afficher du contenu dynamique sur des pages web. Depuis le début de l'année, plusieurs vulnérabilités sur Adobe Flash Player ont été signalées par le...
Targeted servers have seen nearly 1 million login attempts each, from bad actors in China.
Redmond will continue packing more CVEs per bulletin in 2015, says Tripwire
Le grand écart entre le niveau de la menace et les mesures de protection mises en place sur les infrastructures critiques françaises a-t’il une chance de se réduire en 2015 ?
Plusieurs éléments permettent de l’espérer : la révélation en [...] Lire la suite
DNS-based attacks jumped 100-fold in 2014, according to Nominum
Too many organizations are relying on existing e-commerce solutions instead of looking at mobile as a standalone honeypot of fraud.
We need to do more to protect ourselves. 2014 overflowed with front-page proof: Apple, Target, JPMorgan Chase, etc, etc. The current, vulnerable status quo begs for radical change, an influx of talented people, and substantially better tools. As we look ahead to driving that change in 2015, we’re pr...
Russian hackers are using a faux version of the the Razer Comms voice chat service for PC gamers to spread malware.
Investigation and remediation costs could be just the first of many
A porn lure and a fake Flash update have dug in over at the social network.
The continued success of ransomware in general indicates the need for new defensive techniques.
Attacks exploiting weak passwords have created significant market demand for mobile user authentication.
Testing the skills of the next generation of cyber-defenders was the central focus of PwC's UK HQ cyber-forensics challenge.
The experimental grant program pays researchers for their time, before they even discover a coding vulnerability.
New version of ransomware could spell trouble for firms
Former law enforcer will have work cut out at financial services giant
Cross-party group wanted to add amendments to Counter Terrorism and Security Bill
Adobe is facing the third zero-day in a month for Flash Player.
Another blunder means discs go missing in the post
Long-running civil war goes cyber with targeted attacks