> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity news highlights several key threats and trends. OpenAI is facing growing challenges with AI misalignment, raising concerns about the behaviors of its models. IonQ's $1.2 billion acquisition of Elisity aims to enhance quantum cybersecurity solutions as the industry anticipates a shift towards quantum technologies. Microsoft has released an unprecedented 1,407 CVEs during October Patch Tuesday, including three critical zero-day vulnerabilities, emphasizing the urgency for organizations to update their systems. Additionally, a Saudi national and OpenAI employee was arrested for allegedly installing a hidden recorder at the company, illustrating internal security threats. Lastly, U.S. authorities report that North Korean hackers are increasingly infiltrating American companies, exploiting them as conduits for cyber operations.
|
// AI-powered summary generated at 04:00
Racing Post, a British horse racing, greyhound racing and betting newspaper, announced Sunday that its website had been breached and usernames, first and last names, passwords, email addresses and date of birth have been stolen.
A methodical brute-force password-guessing attack on web hosting development site GitHub has resulted in a mass password reset and the revocation of various security authorizations.
Mois de la sécurité, Assises de la sécurité, révélations Snowden sur les pratiques de la NSA, failles Internet Explorer, projet de loi ANSSI : petit tour des actus de l’automne…
Il y a un paradoxe en cette fin d’année 2013 [...] Lire la suite
Trojan backdoors have traditionally attacked desktop and now mobile computers. In recent months, however, attackers have started to target servers. Two typical purposes are to use server bandwidth for powerful distributed denial-of-service (DDoS) campaigns and to use the server to compromise web pag...
The ongoing cyber-attacks by Anonymous on US government websites are being made possible thanks to an exploit for Adobe ColdFusion.
A new vulnerability in Lenovo network storage devices has been uncovered. The flaw can potentially be exploited by an attacker to gain unauthorized remote read-only access to network-attached storage (NAS) shares.
This year has seen a few high-profile wins for the good guys in the form of botnet takedowns, especially those by Microsoft and Symantec earlier this year. But at least one security researcher is warning against rejoicing too heartily: the takedowns, he said, do little to make an impact on web safet...
Last Thursday the Inj3ct0r Team hacking group claimed on Twitter, "Inj3ct0r Team hacked http://vBulletin.com and http://Macrumors.com." By Friday vBulletin admitted the breach, and on Monday it was reported that a zero-day vulnerability used against both MacRumors and vBulletin had been put on sale...
CryptoLocker, the ransomware menace that has been snowballing in profile of late, is stepping up its game even further. The UK’s National Crime Agency (NCA) is warning that its National Cyber Crime Unit are aware of a mass email spamming event that is affecting tens of millions of residents.
US public companies are more forthcoming with details regarding their cybersecurity risk profiles – and more transparency regarding cyber-risk and cyber-attacks is expected to drive greater adoption of cyber-insurance as a means of demonstrating better corporate risk management.
Back in August the FBI announced that it had neutralized Anonymous "because of the dismantlement of the largest players." This seemed to be confirmed with the October arrest of Brit Lauri Love for hacking thousands of networks including those of federal agencies.
Over the past few weeks, Dragos Ruiu has provided details of a mystery infection that first attacked his computers some three years ago. He can't find it, he can't get rid of it, it survives reboots and clean installs, and seems to spread via wireless audio waves. It's either the God of Malware, an...
Masterminds behind a large-scale cyber-heist at Fidelity Investments in California have been arrested.
Google has patched 12 security vulnerabilities in the latest version of its browser, Chrome 31, paying out almost $11,000 in bug bounties in the process.
WikiLeaks published Wednesday the full draft text of the intellectual property rights chapter for the secretly negotiated Trans-Pacific Partnership (TPP). TPP is a trade agreement primarily involving Pacific Rim countries (although currently excluding Russia and China), and it accounts for around 40...
A breach of a data center in Ireland has compromised the information of 1.5 million people.
MacRumors was targeted and hacked in a manner similar to the Ubuntu Forums hack in July, announced its founder and editor Tuesday. "It's best to assume that your MacRumors Forum username, email address and (hashed) password is now known," he warned.
There have been many suggestions on how Edward Snowden managed to steal so many top secret documents from the NSA; but the NSA has kept quiet. Now new research claims to know how it was done, and challenges the NSA to deny it.
Trustwave, a Chicago-based firm with a wide range of security offerings and a particular specialism in data protection, has bought privately held New York-based Application Security Inc, a specialist in database security. The acquisition is complete, and terms have not been disclosed.
Today is Waking Shark II day – the day the City of London's cyber resilience is tested in a day long exercise. Details are scarce (it wouldn't be a test if they were known) but the war game is expected to concentrate on the ability of banks to maintain operations in the face of a sustained cyber att...