> TODAY'S SUMMARY (150 articles)
Todayâs cybersecurity news highlights significant vulnerabilities and trends. Microsoftâs October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
The Guardian newspaper has exposed a Foreign Intelligence Surveillance Court (FISC) âtop secretâ order requiring Verizon to provide the NSA with all âtelephony metadataâ for communications within the USA and between the USA and abroad.
Secunia, the Copenhagen-based provider of security software, announced the appointment of Microsoftâs Peter Colsted as the firmâs new chief executive.
We interrupt our regularly scheduled programming to bring you an important announcement: On Thursday, June 6th, just in time for SummerCon, we will be hosting a free Ruby Security Workshop in NYC! Signups are first-come, first-serve and we only have space for 30 people. Sign up here and we will emai...
The Ponemon Institute today released the 2013 Cost of Data Breach Study: Global Analysis which reveals data breaches are often the result of poor processes, and the latest study from Ponemon Institute bears this out: Human errors and system problems caused two-thirds of data breaches in 2012. They a...
A new survey outlines the practical experience of IT/security professionals over the increasing use of personal devices within their business environment during the last 12 months.
In the final part of our three-part series, we investigate the how the toolkit user gained control of program flow and what their strategy means for the reliability of their exploit. Elderwood and the Department of Labor Hack Writing Exploits with the Elderwood Kit (Part 1) Writing Exploits with the...
For commercial software coders looking to thwart cybercriminals, finding and fixing vulnerabilities is all well and good. In reality, though, that approach to product security can be a colossal waste of time and resources, according to Adobe's Brad Arkin. What really makes a difference is mitigation...
As the government continues to mull regulations on cybersecurity info-sharing, a survey shows that a majority of Americans (82.1%) are concerned about a data breach involving at least one of five organization types. However, theyâre evenly mixed on whether legislation should require private business...
In the second part of our three-part series, we investigate the tools provided by the Elderwood kit for developing exploits from discovered vulnerabilities. Elderwood and the Department of Labor Hack Writing Exploits with the Elderwood Kit (Part 1) Writing Exploits with the Elderwood Kit (Part 2) Se...
The malware behind a widespread cyber-espionage campaign against political and critical industry targets has been called out: NetTraveler, a malicious program used for covert computer surveillance, has successfully compromised at least 350 high-profile victims in 40 countries, with the total likely...
ARM, the British chip manufacturer that dominates the world's smartphones, is making it more attractive for high-value video content producers (Hollywood studios) to make HD films available on smartphones.
Recently, the Department of Labor (DoL) and several other websites were compromised to host a new zero-day exploit in Internet Explorer 8 (CVE-2013-1347). Researchers noted similarities between this attack and earlier ones attributed to Elderwood, a distinct set of tools used to develop several past...
Security researchers have discovered a new phishing website âunder constructionâ; one designed to take advantage of rapidly growing iOS7-mania.
Security for Apple mobile devices has been looking pretty good in light of the tsunami of Android malware making headlines lately, but a newly discovered hardware vulnerability in the Apple iPhone, iPad and iPod Touch adds new concern when it comes to the iOS platform.
Plusieurs rendez-vous français habituels sont consacrés cette année à la cybersécurité industrielle.
Comme pour faire Ă©cho Ă mon prĂ©cĂ©dent article concernant la publication en 2013 de plusieurs normes par lâISA (International Society of Automation), lâantenne française de [...] Lire la suite
Evernote has become the latest online denizen to roll-out two-step verification for accounts, following a hack that required all 50 million users to reset their passwords. Itâs also implemented access history and authorized applications features.
In the wake of a favorite money-laundering service being seized and taken down by the US government, the hacking underworld is mulling what to do next, financially.
No facial recognition for Google Glass yet â at least not through the front door - "without having strong privacy protections in place" confirmed Google in a brief Google+ statement Friday.â
A company, assumed to be Google, had challenged the legality of 19 National Security Letters demanding account information on its users; but a judge last week ruled that it must comply.
In the wake of high-profile Twitter and Facebook hackings and about a year after it experienced a password heist, LinkedIn is beefing up its security: it has become the latest web denizen to join the optional two-factor verification fray, and is now offering free trials of security software to users...