> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
There is a current scam campaign in the UK claiming that people are overdue in payment of a parking charge. An email apparently from the Ministry of Justice claims that photographic evidence of the offense is enclosed in an attachment. This, says the police ActionFraud website, "is likely to contain...
BAE Systems has released a major analysis of a long-standing cyber espionage campaign that has all the hallmarks of state-sponsored malware. The malware is sophisticated, covert and persistent, and seems to have been in operation since at least 2005. There has been a major uptick of detections durin...
Javelin shows you how modern attackers would approach and exploit your enterprise. By simulating real-time, real-world attack techniques, Javelin identifies which employees are most likely to be targets of spearphishing campaigns, uncovers security infrastructure weaknesses, and compares overall vul...
If Facebook promised you naked videos of your friends, would you click? As much as you may be tempted to find out why your former 8th-grade computer lab partner is sending you a racy video selfie, beware: it is, of course, a scam.
Microsoft once again gave up only a small percentage of content data to law enforcement agencies that asked for it in the last six months of 2013. Only 2.32% of requests from police and other organizations globally resulted in disclosure of data regarding specific activities or messaging content, it...
Have you ever wanted to make a query into a native mode program asking about program locations that write a specific value to a register? Have you ever wanted to automatically deobfuscate obfuscated strings? Reverse engineering a native program involves understanding its semantics at a low level unt...
The question repeatedly asked by the bitcoin community since Mt Gox announced that all of its bitcoins had been stolen by hackers, is where have they gone? While bitcoins do not reveal their owners, their use can be tracked via blockchains – and there has been no sign of their use.
Getty Images has a reputation for being a copyright maximalist. It has sued breaches of copyright, and lobbied Congress for stricter copyright legislation. So when the world's largest collection of photos – in excess of 80 million still images – declared that many of those images would be available...
1 - Création du CERT-FR Le 21 janvier 2014, le CERTA a changé de nom pour devenir le CERT-FR (Computer Emergency Response Team - France). Le CERT-FR est le CERT gouvernemental français. Il apporte son soutien en matière de gestion d'incidents aux ministères, institutions, juridictions, autorités...
Criminal theft of private data from public Wi-Fi hotspots is not new, but is increasing. The two most prevalent methods are traffic sniffing and man-in-the-middle attacks using a rogue, criminal-controlled hotspot. Talking to the BBC, Europol has warned the public to be ever-vigilant in public place...
Close on the heels of the discovery of an Android remote administration tool (RAT) known as AndroRAT – believed to be the first ever malware APK binder – comes a new variant of the idea, dubbed Dendroid.
For the JM Smucker jam and jelly company, life isn’t so sweet at the moment: attackers have managed to get into the company’s online ordering system, lifting personal information on customers. In the aftermath, the company has shuttered its online store.
This month's Patch Tuesday is light, containing just five bulletins. Two are marked critical and three are marked important. One of the critical bulletins addresses Internet Explorer, and is believed to include a fix for the zero-day vulnerability highlighted by FireEye last month. Three fixes requi...
It was post-dot-com bubble and post-Worldcom implosion, and the so-called “telecom winter” was dragging on. In the early 2000s, the communications industry had, in a word, been economically decapitated, and companies were struggling to find a new path to innovation and technology enablement that lef...
As the adoption of mobile devices continues to grow rapidly and businesses increasingly provide on-the-go access to corporate assets, the mobile malware landscape is evolving to take advantage of mainstream user behavior. In a sign of the times, web ads directing users to malicious sites have eclips...
One of the leading anti-virus test labs, AV Comparatives, has published its fourth annual survey of users.Five thousand eight hundred and forty five users from all around the world responded to the survey, giving a snapshot of browsers, operating systems, and AV products currently being used.
Anti-virus firm Malwarebytes has announced that it will now defend Android users against pups, or 'potentially unwanted programs.' "The research team at Malwarebytes has noticed an increasing number of Android PUPs and, as from today, the new version of Anti-Malware Mobile will give people an option...
The worldwide cybersecurity skills shortage is well-documented; and many countries have developed programs to fill the gap. These programs usually try to instill interest in schools, or tempt IT professionals into a career in security.
There are a number of big artists touring this year, such as Beyoncé, Justin Timberlake and One Direction, and it’s also drawing closer and closer to the 2014 FIFA World Cup in Brazil. Given the marquee nature of the events, people need to be careful when searching the web for tickets to sold-out ev...
A new spam campaign delivering a Java remote access trojan (RAT) known as JRAT has been uncovered, with the emails claiming to have attached a payment certificate to the message. The campaign has predominantly affected the UAE and the UK to date and appears to be after specific victims.