> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
Mike Yaffe, director of enterprise marketing with Core Security, has launched what appears to be a thinly-veiled attack on the IT security professionals defending the systems that have been hacked in recent weeks and months by hacktivist groups such as Anonymous and LulzSec.
Cellcrypt has taken the wraps off an encrypted telephony app for Google Android smartphones and tablets. Compatible with the firm's existing Symbian and Blackberry apps, as well as its commercial systems, the app supports 2048-bit RSA encryption.
US Senate officials have ordered a security review after hackers from LulzSecurity broke into the chamber's website over the weekend.
The reputation of the ChronoPay e-money service took a battering last year when security researcher Brian Krebs revealed the backers of the service had questionable links with cybercriminal sites.
Despite a number of infected apps appearing on the official Android Market - the equivalent of the Apple iTunes store - earlier in the year, Google still appears to have an infected apps problem, with one US researcher having spotted infected bonus versions of Angry Birds early last week.
C-level executives are concerned about moving business-critical applications into virtual and clouds environments due to the challenges of security, reliability, availability, and performance, according to a recent survey sponsored by Symantec.
The widely reported cracking of the Skype protocol - a process that will eventually allow tech-savvy hackers to eavesdrop on Skype IP data streams, whether or not compact headers are used - could have been prevented, says StarForce Technologies, the Russian copy protection specialist.
The European Union has set up a team to establish a Computer Emergency Response Team (CERT) to counter the threat of cyber attacks against EU institutions, bodies and agencies.
Power plant control systems and smart meters are two components of the smart grid that could be particularly vulnerable to cyber attacks, says Ulf Lindqvist, program director at SRI International’s Computer Science Laboratory.
Greek police have arrested an 18-year-old hacker suspected of breaking into the website of Interpol, the FBI and number of US state agencies.
A Canadian cellular phone dealer was recently ripped off by a trio of thieves in his store, resulting in the theft of thousands of dollars worth of Apple iPhones. But the manager of the Teleco store in Winnepeg managed to collate all the CCTV videos from the store and turn it into a mini-documentary...
Security researcher Brian Krebs has completed his latest research into a relatively new type of crimeware called PPI - pay-per-install - where criminal gangs are now paying commissions to third parties for any malware infections they achieve.
Google has awarded researchers close to $10,000 for identifying security flaws in its Chrome web browser; version 12 fixes 15 vulnerabilities in total.
Roughly 1% of Citigroup’s 21 million North American customers’ credit card accounts were hacked, the bank has admitted.
European Union data protection regulators have called for an investigation into a Facebook feature using face-recognition software to help tag people in images on the social media website.
The high profile failure of a state-of-the-art biometrics system at a major international travel hub in Malaysia last weekend has sent shockwaves throughout the global biometrics industry.
Ocean Bank is not legally responsible for a cyber heist of $588,000 from a customer’s online account using the Zeus trojan, according to a ruling by a judge in Maine.
Oracle surprised many of its software developers and vendors with a major update of the Java programming language this week. Although scheduled as part of its monthly update, the patches tackled no less than 17 security problems.
If companies employ pen testers to check their security out - why not mobile phone vendors? Which is pretty much what Samsung have done with their new Galaxy S2 smartphone, by handing the unit over to a hardware hacking group for custom ROM development.
A Tokyo-based Symantec researcher claims to have discovered another batch of infected Google Android apps, subverted by what he calls the follow-up to the now-infamous DroidDream malware.