> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity news highlights several key threats and trends. OpenAI is facing growing challenges with AI misalignment, raising concerns about the behaviors of its models. IonQ's $1.2 billion acquisition of Elisity aims to enhance quantum cybersecurity solutions as the industry anticipates a shift towards quantum technologies. Microsoft has released an unprecedented 1,407 CVEs during October Patch Tuesday, including three critical zero-day vulnerabilities, emphasizing the urgency for organizations to update their systems. Additionally, a Saudi national and OpenAI employee was arrested for allegedly installing a hidden recorder at the company, illustrating internal security threats. Lastly, U.S. authorities report that North Korean hackers are increasingly infiltrating American companies, exploiting them as conduits for cyber operations.
|
// AI-powered summary generated at 04:00
Google's Safe Browsing Tool, used by Chrome, Firefox and Safari to protect users from sites serving malware, yesterday blocked php.net, home of the hugely popular open-source PHP programming language.
The (ISC)² Foundation, the nonprofit charitable trust of (ISC)², today announced the inaugural recipients of the 2013 USA Cyber Warrior Scholarship, a program developed in partnership with Booz Allen Hamilton to help close the cybersecurity workforce gap by providing career training to qualified vet...
Mois de la sécurité, Assises de la sécurité, révélations Snowden sur les pratiques de la NSA, failles Internet Explorer, projet de loi ANSSI : petit tour des actus de l’automne…
Il y a un paradoxe en cette fin d’année 2013 [...] Lire la suite
Network Solutions has had more than a few problems recently. In July a DDoS attack affected some of its servers; this was followed by internal MySQL problems. Then came the DNS hijack affecting some major customers earlier this month.
Payday loans and sports betting – the latter hitting new heights with the start of the football season – are behind the majority of messaging spam received in the UK.
A new report suggests that companies are unaware of the extent of the DDoS threat, unaware of the potential cost of an attack, and over-reliant on traditional and inadequate in-house defenses.
Cross-site scripting (XSS) and SQL injection activity is up 32% in the third quarter, as those with malicious intent look to specifically target web-facing and cloud applications carrying sensitive information about organizations and their customers.
The International Atomic Energy Agency (IAEA) has admitted that some of its computers have been infected with malware for at least the last few months, but denies that any sensitive data regarding its nuclear inspections has been compromised.
Distributed denial-of-service (DDoS) attacks are getting more frequent and harder to detect. To help companies keep up with daily threat levels, Arbor Networks has collaborated with Google Ideas to create a data visualization map of global attacks.
The costs of data breaches have been well-documented when it comes to remediation and consulting costs, but the more qualitative fallout from a breach, like the impact to brand identity, is harder to pin down.
Edward Snowden's leaked information on the character and extent of NSA surveillance brought new impetus to the European Commission's proposed new General Data Protection Regulation, which had been floundering under the weight of extensive US government and business lobbying.
Researchers have found at least 25 new vulnerabilities in SCADA software, which controls critical infrastructure that, among other things, keeps clean water and reliable heat and electricity flowing to houses.
Singapore-based TalariaX, and its sendQuick appliance-based SMS gateway, will continue as a SecurID partner for RSA Authentication Manager 8
Today is the first day of Get Safe Online Week 2013, "an annual awareness campaign organized by Get Safe Online (GSOL) to reinforce the fact that people can stay online safely just by following some simple precautions." But neither adults nor children are yet doing so.
Email scams are often given away by poor grammar and typos. AppRiver, however, has discovered a new scam that looks more than usually professional. It's an email that says, "You recently requested a link to reset your Dropbox password. The old one is now marked as "dangerous".
The SANS Institute has announced an enhanced calendar of training events across Europe for 2014.
In the wake of a data breach at the Royal Veterinary College, the UK’s Information Commissioner’s Office (ICO) is warning organizations they must make sure that their data protection policies reflect how the modern workforce are using personal devices for work.
On Friday 11th October 2013, veterans, women in top security positions and the next generation of cyber defenders met at the home of British code-breaking, Bletchley Park.
Oracle has released its Critical Patch Update (CPU) for October 2013, incorporating, for the first time, Java, which was heretofore patched on a separate cycle every four months. The update is massive, fixing 120 flaws across most of Oracle’s product families.
Distributed denial-of-service (DDoS) attacks are getting harder to identify, and they will most likely be found to originate in Indonesia or China, new research has shown.