> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
The distributed denial of service (DDoS) attacks launched in March of this year against sites affiliated with the South Korean government, military, and civilian infrastructure were the result of a highly sophisticated, coordinated attack, most likely perpetrated by North Korea, according to analysi...
The Washington Post has admitted to a data breach that compromised user IDs and emails of 1.27 million job seekers who use its employment website.
MI5 - the military intelligence agency responsible for counter-intelligence operations in the UK - was responsible for more than 1,000 bugging errors last year, the Guardian newspaper has reported.
A fraud analyst with Trend Micro is reporting that a Facebook attack currently in progress is leveraging the LinkedIn business social networking site and service.
Interoperability and data portability are as important as security to long-term adoption of cloud computing services, according to experts with the Institute of Electrical and Electronics Engineers (IEEE).
Health insurer WellPoint has to pay $100,000 in fines for delaying notification to 32,000 Indiana customers affected by a possible data breach, according to a settlement with the Indiana Attorney General.
The International Cyber Security Protection Alliance (ICSPA) was officially launched in London on Tuesday 5th July. Backed by the UK government, the non-for-profit body which brings together business, government and law enforcement, aims to combat the growing threat of cyber crime by supporting inte...
Infosecurity Europe and Infosecurity magazine are delighted to announce the formal collaboration of their brands and products with immediate effect.
The impending launch of Apple and Google into the area of consumer cloud computing services in a major way is changing the way that cybercriminals view the cloud, claims Peter Cochrane, a technology researcher and former CTO of British Telecom.
It’s the Fourth of July in the US today, when Americans are celebrating Independence Day, but IT security vendors have spent the weekend issuing warnings on phishing and infected emails taking advantage of the celebrations.
Cybercriminals are opting for more lucrative targeted attacks, rather than for the traditional mass spam campaigns, according to a new report by Cisco.
Lockheed Martin is teaming with American Electric Power to offer the Palisade cybersecurity product for the smart electricity grid.
JanusNET - a leading IT security vendor in Australia - is in the process of setting up in the UK and Infosecurity managed to talk to the firm's managing director Greg Colla late last month.
M86 Security is reporting a malicious spam campaign is now under way, fooling internet users into downloading an "attached statement" with a message that their credit card is overdue.
Trusteer, the web browser security specialist, is reporting a surge in the number of people's computers infected with the Hiloti trojan. The firm says that, in the UK, infection rates have tripled in the last ten days.
Hackers are reported to have gained unauthorised access to a network of US defence industry news portals and downloaded sensitive user information that could be used in spear phishing and other types of targeted attacks.
A Symantec researcher claims to have discovered a new type of Android malware threat in the shape of class loading hijacking, which effectively means that hackers can remotely take over most, if not all, aspects of a smartphone or tablet computer.
The average cost of compliance associated with storing unstructured data is $2.1 million per year, according to a report prepared by the Ponemon Institute for software firm Novell.
If you mistakenly click on an infected link in an email, a lot can happen, but now a Symantec researcher has detailed – in some depth – what happens during a typical backdoor attack.
It seems that the last database upload on filesharing sites from the LulzSec hacktivist group – which publicly disbanded last weekend – was infected with malware.