> TODAY'S SUMMARY (119 articles)
Today's cybersecurity landscape highlights several critical issues and ongoing threats. Siemens has issued 17 advisories for industrial control systems, while Rockwell has patched a vulnerability in their ArmorBlock devices. Microsoft has set a new record by addressing 1,413 vulnerabilities in its latest Patch Tuesday, including zero-days actively exploited. There is an urgent call from U.S. senators for improved federal AI safety and security measures, as AI systems increasingly become targets for exploitation. A recent cyberattack in France compromised IoT-connected fridges, raising alarms about the vulnerabilities of connected devices. Additionally, the U.S. has intensified efforts against North Korean hackers exploiting remote work setups, culminating in arrests tied to laptop farms. Overall, the surge in vulnerabilities and attacks underscores the need for proactive security measures across industries.
|
// AI-powered summary generated at 16:00
A rampant lack of parental supervision of online behavior is placing many kids under 11 in unsafe situations.
F-Secure says OnionDuke malware has already been used against European government agencies
Le précédent article consacré à shellshock introduisait le sujet et en donnait l’essentiel à savoir..
Ce second article examine les impacts sur les SI industriels en posant la question de la présence de la faille shellshock pour chaque type d’équipement. [...] Lire la suite
By default the sending server will transmit plaintext email over the public Internet, where it is easily subject to eavesdropping and interception.
Employees need better cloud security tools, but recent hacks haven't made any significant impact on SMB security decisions.
Au vu des analyses que l’on peut lire dans la presse, cette faille dépasserait en ampleur la précédente star des medias (Heartbleed dans OpenSSL), et menacerait internet de congestion en cas de ver qui comme Slammer [...] Lire la suite
NOAA accused of cover-up as cause of incursion remains unknown.
New revelations claim contractor for the Natanz facility was ‘patient zero.’
He pretended to be Orange security staff member to get log-ins for customer database.
Massive October spike coincides with pro-democracy protests
CrowdStrike warns Chinese attackers and hacktivists may be readying campaigns
Mandiant boss says Kremlin and criminal elements have stepped up activity
The attackers are not only using the aging CVE-2012-0158 vulnerability, but the newer CVE-2014-1761 as well, exploiting these to download or drop a Zbot variant.
Home Depot also said that 53 million email addresses were stolen along with the previously disclosed 56 million payment card details.
The foundation has announced the first round of recipients of the 2014/2015 U.S.A. Cyber Warrior Scholarship.
Signals Directorate releases best practice advice on how to stay safe online
The latest transparency report shows the highest number of requests ever recorded for info on the social network's users.
The app, used for Galaxy devices remotely, has been patched.
Information-stealing trojan has its sights set on Blighty
Panda Security stats show trojans still top the list