> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
The consumerization of IT and the bring-your-own-device phenomenon in the enterprise has given rise to concerns over data security stemming from risky mobile applications and unsecured devices. The US National Institute of Standards and Technology (NIST) is attempting to address the concerns with th...
SMS trojans are starting to appear in more and more countries, and for the first time, researchers have detected an active SMS trojan in the US.
Mobile banking trojans! Bitcoin wallet attacks! Cyber-espionage threats! It turns out that these three cyber-baddies are developing their attack trajectories exactly as predicted for 2014.
The Samsung Galaxy S5 has been on the market for only a matter of days, with its highly anticipated fingerprint scanner that will work with PayPal for mobile purchases. But there’s just one problem: German researchers have managed to fool the scanner with a latex fingerprint spoof.
Purveyors of distributed denial of service (DDoS) attacks are chewing up more bandwidth than ever before, and, according to Akamai Technologies’ Prolexic Q1 2014 Global DDoS Attack Report, are looking to turn the internet into one on-demand botnet thanks to evolving techniques that can deliver a big...
Samsung and PayPal have announced that they will be using the S3 Authentication Suite from Nok Nok Labs to leverage the emerging Fast IDentity Online (FIDO) standards for mobile payments.
Japan's first bitcoin ATM will soon be landing in that country, earmarked for unveiling in Suzuka City, home of Japan’s Grand Prix event. From there, it will go on to a permanent location, to be determined.
It’s no secret that mobile malware is growing exponentially, with Android bugs leading the way, but one stands out above the rest: The Trojan-SMS.AndroidOS.Stealer.a - better known as 'Stealer' - has become a leader in terms of the number of attempted infections on user devices monitored by Kaspersk...
CloudFlare has launched a vulnerability disclosure program, facilitated by HackerOne’s bug reporting platform. The vendor is inviting the security community to report any flaws members may have discovered, track CloudFlare’s progress in addressing it, and receive confirmation when it has been fixed.
The Heartbleed flaw in OpenSSL is continuing to leave gaping holes in the security perimeter for organizations worldwide, including within industrial control systems. It turns out that certain Siemens and Innominate ISC products are vulnerable to this latest threat.
The revelations in 2013 that governments and their agencies have been spying on citizens in the name of national security have seriously undermined trust when it comes to operating in cyberspace, according to the Information Security Forum (ISF).
Netflix is being used in a new phishing scam that lures victims into calling a “tech support” line, connecting to a live human that proceeds to probe around the user’s PC and lift information, behind an elaborate cover.
Qualys, Inc., a pioneer and leading provider of cloud-based security and compliance solutions with over 6,700 customers worldwide, will be exhibiting at Infosecurity Europe 2014, which takes place in Earl’s Court, London, from April 29 through May 1.
The scourge of Heartbleed, which may affect nearly two-thirds of websites, is continuing apace with data exposures at leading UK parenting site Mumsnet and the Canadian tax agency.
More than a year after security firm Mandiant caused a stir by publishing a report that alleged China was behind widespread and increasingly sophisticated cyber-espionage projects, it’s back again to tell us that things have gone from bad to worse.
The major security flaw known as Heartbleed, which may affect nearly two-thirds of websites online, threatens to expose masses of usernames, passwords and other sensitive information worldwide. And, predict experts, the ramifications will be with us for years.
A fresh Android vulnerability dubbed “occupy your icons” by mobile researchers has been uncovered. It allows a malicious app to replace legitimate Android home screen icons with fake ones that point to phishing apps or malware-serving websites.
Dr. Eric Cole, SANS Instructor and security consultant, will be this year’s lone inductee into the Infosecurity Europe Hall of Fame
Managed services provider Masergy has acquired advanced security services provider Global DataGuard in a move that significantly ramps up its security portfolio.
Medina Capital, the equity investment firm focused on the IT infrastructure sector, is fleshing out its security portfolio with the purchase of Cryptzone. The publicly traded company offers encryption and identity and access management (IAM) solutions.