> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
The current operating system-based security model is not adequate to stop the proliferation of stealth crimeware, concludes a recent white paper by McAfee and Intel.
Today Google announced it will be adding new features to Gmail accounts in an effort to reduce the effectiveness of phishing emails.
FBI agents raided an Iowa woman’s home this week looking for information on the Lulz Security (LulzSec) hacker group that had been on a 50-day hacking spree before an alleged member of its group was arrested in the UK.
A new group of hacktivists associated with the AntiSec movement claim to have staged a major DDoS attack against MasterCard, apparently in connection with the long-running controversy over the removal of card processing facilities for the WikiLeaks group.
Cellcrypt has extended its public key cryptography service to users of the Apple iPhone, adding to the apps already available for the Symbian, Blackberry and Android platforms.
A leading security researcher claims that more than half of all sales at the world's largest rogue internet pharmacy in the last four years were charged to credit and debit cards issued by the top seven card-issuing banks.
The House Republican leadership has tasked Rep. Mac Thornberry (R-Texas) to head a cybersecurity task force to analyze the Obama administration’s cybersecurity legislative proposal and to develop a Republican response by October.
Whisper Systems, one of the more innovative Android software houses, has released a beta test edition of Whispercore, an extended version of Google Android for Nexus S and Nexus One smartphones.
The organisers of Black Hat and its parallel Defcon security event, due to be held in Las Vegas this summer, have announced a number of enhancements, including live event streaming for Black Hat, and a kids security education session for Defcon 19.
SQL injection flaw is the most dangerous software vulnerability, according to the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.
Hard on the heels of publicly slating - and declaring war - on the LulzSec hacktivist group, Teamp0ison, the Dutch hacking group, has posted a large volume of private emails and information about former UK Prime Minister Tony Blair.
A Trend Micro security researcher claims to have discovered a new type of malware infection on the Google Android platform that acts as an SMS (text message) relay.
Building on a presentation he made at the Infosecurity Europe event in late April, Eugene Kaspersky, CEO of Kaspersky Lab, has warned of the danger that the internet could become a cyberconflict vehicle for governments to attack each other.
Travelodge has confirmed that a "small number" of customers have received a spam e-mail via a third party, but insists that no financial data is at risk.
The European Union (EU) is planning new legislation to mandate companies to publicly admit that they have suffered a data breach.
The reputation of the Russian ChronoPay e-money service has taken a further battering after a security researcher linked the co-founder of the service - who has apparently fled from Russia - with a distributed denial of service (DDoS) attack against a competitor.
Users of the Installous software - an extensible code environment for jailbroken Apple iPhones - could be in for a shock if they are thinking of upgrading to a jailbroken version of iOS5, which is already doing the rounds of the iPhone cognoscenti.
Twin brothers Cameron and Tyler Winklevoss, who claim Mark Zuckerberg stole their idea for the social networking site Facebook, have abandoned legal attempts to renegotiate the original $65m settlement.
Authorities in Cyprus have shut down a major pirate TV operation that offered illegal subscriptions to BSkyB, Nova and BFBS payTV subscription services.
Hell hath no fury like a hacker scorned, it seems, as a Dutch hacking crew called TeaMp0ison has effectively declared a cyberwar between its members and the LulzSec hacktivist group.