> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights critical threats in the software supply chain and the rising risks associated with AI technologies. Attackers have exploited OpsShield's trusted update channel, demonstrating vulnerabilities in software supply chains that could compromise user security. Meanwhile, financial institutions, such as Bank of America, are warning customers against sharing sensitive banking information with AI assistants, emphasizing the potential for significant financial risks. These developments underline the urgent need for enhanced security measures in both software development and user interactions with AI.
|
// AI-powered summary generated at 04:00
Questions abound as to the company’s governance and stewardship of citizen data.
Registrar Enom has now fixed the issue
Microsoft exposed their users to a lot of risks when they released Windows Defender without a sandbox. This surprised me. Sandboxing is one of the most effective security-hardening techniques. Why did Microsoft sandbox other high-value attack surfaces such as the JIT code in Microsoft Edge, but leav...
US-based credit monitoring service Equifax has reported a data breach of 143 million records.
MoneyBack left a misconfigured database open, with passport info, credit card numbers, travel tickets and other credentials.
Nearly half of them would pay a ransom on connected things to reclaim their data.
Determined group may already have access to operational systems, warns Symantec
32 states have won a multimillion dollar settlement to resolve violations of state consumer protection laws.
A critical remote code execution vulnerability has been found in the popular open-source framework, threatening corporate data.
451 Research claims consolidation must focus on data and risk-centric approaches
Over 75,000 victims and counting
The records included usernames, email addresses and passwords hashed with the easily cracked MD5 algorithm.
West is failing to halt Kremlin propaganda, says foreign minister
Countries facing increased threat levels post-Brexit, warns ICCTF
Celeb victims include Taylor Swift and Leonardo Di Caprio
The vulnerability stems from the type of session tokens used by GitLab.
Staff fell for a business email compromise gambit after receiving a request to change banking info for a vendor.
Juniper will use the buy to shore up its own cyber-portfolio—including its virtualized security offerings.
Source code reviews could generate exploits for Chinese spies
The council has been fined £70,000 by the Information Commissioner’s Office.