> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
The (Russian) Neutrino exploit kit was first described by the French researcher Kafeine (Malware don't need Coffee) almost exactly one year ago. "A new exploit kit is being advertised since yesterday on underground forum : Neutrino," he announced. Now it is for sale.
Team Cymru, a US security research firm based in Illinois has been investigating a SOHO router pharming campaign since January. So far it has identified 300,000 compromised devices, predominantly in Europe and Asia, with evidence that the campaign started at least in December 2013.
Javelin shows you how modern attackers would approach and exploit your enterprise. By simulating real-time, real-world attack techniques, Javelin identifies which employees are most likely to be targets of spearphishing campaigns, uncovers security infrastructure weaknesses, and compares overall vul...
Reuters Technology reporter Joseph Menn interviewed security expert Bruce Schneier in front of last week’s TrustyCon audience in San Francisco, where the security expert provided his analysis of the government surveillance controversy
As teens and tweens increasingly live their lives digitally and in an oversharing-friendly way, online safety has become a hot topic for concerned parents. Typically it’s seen as the families’ responsibility for monitoring their children’s internet and mobile use, but purveyors of social sites are b...
Have you ever wanted to make a query into a native mode program asking about program locations that write a specific value to a register? Have you ever wanted to automatically deobfuscate obfuscated strings? Reverse engineering a native program involves understanding its semantics at a low level unt...
Russia Today (RT) tweeted Sunday, "Hackers deface http://RT.com website, crack admin access, place 'Nazi' in every headline. Back to normal now." Although the hackers are not known, it could be in retaliation for the increasing number of reports describing the pro-West Kiev government as 'neo-Nazi....
Bloomberg reported Saturday that US retail giant Sears "is investigating a possible security breach after a series of cyberattacks on other retailers have exposed the data of millions of consumers." Sears is apparently being aided in this investigation by both Verizon's digital forensics unit and th...
1 - Création du CERT-FR Le 21 janvier 2014, le CERTA a changé de nom pour devenir le CERT-FR (Computer Emergency Response Team - France). Le CERT-FR est le CERT gouvernemental français. Il apporte son soutien en matière de gestion d'incidents aux ministères, institutions, juridictions, autorités...
The SANS Institute has released its latest training and events schedule for 2014 in the Europe, Middle East and Asia regions
At a time of heightened tension between Russia and the West over Ukraine, a German security firm describes a sophisticated rootkit that it suggests may have been developed by Russian intelligence services. Named after a string found in the code, Ur0bUr()sGotyOu#, the Uroburos malware is thought to t...
According to documents from Edward Snowden, more than 7% of Yahoo chat users send intimate photos taken via webcam. This is known because GCHQ stopped to count them from among their intercepts. But the concept and practice of 'revenge porn' should make people pause and carefully consider the possibl...
As (ISC)² celebrates its 25th anniversary, the global non-profit is well underway to conducting the most extensive overhaul of the CISSP certification exam in its history. Infosecurity catches up with its executive director at the RSA Conference in San Francisco for a retrospective, and what to expe...
The Council on Cybersecurity (CCS) has launched the 2014 US Cyber Challenge, calling on the industry and government to “get serious” about the workforce problem. The initiative aims to find 10,000 bright students and turn them into cybersecurity professionals.
The BBC reported yesterday that energy companies "are being refused insurance cover for cyber-attacks because their defenses are perceived as weak." Before cover is offered, applicants must undergo a security audit by the insurance companies, but "the majority of applicants were turned away because...
In October 2013 the UK's National Crime Agency announced that a 28-year old Briton, simultaneously identified by the FBI as "Lauri Love, 28, of Stradishall, England," was arrested on suspicion of hacking into US Army, US military and US government computers. Yesterday the FBI further charged him wit...
A new variant of ransomware dubbed BitCrypt has been smashed open by a pair of French researchers.
The US is not unique among nations when it comes to its intelligence gathering abilities. “We are just better” at it than most countries, according to Richard Clarke, the former presidential counter-terrorism adviser.
In his keynote at the RSA Conference in San Francisco, February 25 2014, Scott Charney, VP of Microsoft’s Trustworthy Computing Group, insisted that Microsoft has not compromised its principles in order to work with the NSA
In the opening keynote at the RSA Conference 2014 in San Francisco, Art Coviello, Executive Chairman of RSA, gave his first public comments about RSA’s relationship with the NSA.