> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Ivanti has issued an urgent patch for a zero-day vulnerability in its Connect Secure remote access gateway that is actively being exploited. Additionally, Docker disclosed a severe flaw in Docker Hub that allowed attackers to impersonate users and tamper with container images. GitLab patched a maximum-severity vulnerability allowing unauthenticated code execution on its servers. Multiple vulnerabilities in the Linux kernel were also reported, posing risks for local attackers to compromise systems. In broader trends, North Korean hackers are reportedly targeting Ukrainian experts for intelligence, while small AI models are raising concerns about potential self-replication across IoT devices. Finally, a significant cyberattack on French supermarkets caused widespread food spoilage by hijacking refrigeration systems.
|
// AI-powered summary generated at 16:00
Still reeling from the PlayStation Network data breach, Sony has admitted to a second security breach that may have resulted in the theft of personal information of 24.6 million Sony Online Entertainment (SOE) customers.
Secunia has updated its free patch/update utility – Personal Software Inspector (PSI) – to v2.0, increasing the range of applications that are auto-updated to include web browser add-ins and a variety of other utilities.
After a quiet period since the takedown of the Rostock botnet servers at the start of the year, it looks like malicious spam is back on the increase again. According to Rodel Mendrez, a security researcher with M86 Security, whilst the industry had a distinctly quiet period from October 2010 to Marc...
There is a lack of evidence to support the rhetoric of “cyber doom” employed by proponents of increased federal intervention in private sector cybersecurity, warns a new report by George Mason University (GMU) researchers.
Many organizations do not understand the increasing security risks posed by voice-over-IP (VoIP), warns Forrester analyst John Kindervag.
Many of the cyber agents at the Federal Bureau of Investigation’s (FBI) field offices do not have the training, skills, and support to investigate national security-related cyberattacks, the Justice Department’s Office of the Inspector General (IG) found.
Sony has reiterated its statement that there is no evidence that credit card data was taken by hackers who forced the company to suspend its PlayStation Network in the wake of a security breach.
Research just published by HTK, a mobile messaging and interactive voice response services firm, claims to show that 90% of organisations surveyed have had problems with password resets. In addition, the firm says, 60% of organisations have no out-of-hours support for password resets.
The head virus researcher with Avast claims to have discovered a new Adobe PDF attack vector used by hackers. The attack vector, he reports, centres on the misuse of a filter normally used to encrypt text data for black and white images.
Around 20 million tickets for the London 2012 Olympics were applied for on Tuesday night despite a surge in demand causing the site to crash.
Around 20 million tickets for the Olympics were applied for on Tuesday night despite a surge in demand causing the site to crash.
The US Congress will hold a hearing about mobile phones and privacy after claims that Apple (and Android) devices have been secretly tracking users' location data.
Congress will hold a hearing about mobile phones and privacy after claims that Apple (and Android) devices have been secretly tracking users' location data.
One of the many reasons for securing your WiFi access point were rammed home recently after a New York man woke up to be surrounded by armed police early one morning.
Sony has warned users of its PlayStation Network (PSN) that their personal information, including payment card details, dates of birth, and addresses, may have been stolen.
The extensible code at the heart of the Zeus malware has spawned a new type of fraud designed to lure unsuspecting internet users into clicking through and infecting their machines. This time, reports Trusteer, the malware is targeting investment fraud, with rates of return reaching the 32% mark.
A full 40% of executives from electricity firms think their industry is more vulnerable to cyber attacks, according to a new report by McAfee and the Center for Strategic and International Studies (CSIS).
The Social Security Administration (SSA) published personally identifiable information, including social security numbers, of 36,657 living individuals erroneously listed on the agency’s death master file (DMF) over a three year period, the SSA’s Office of the Inspector General (IG) concluded.
Reports are coming in that the son of Eugene Kaspersky, co-founder of Kaspersky Labs, has been returned to his parents following a covert operation carried out by the FSB, the Russian security police agency.
Facebook has begun introducing two-factor authentication designed to prevent hackers from accessing users' accounts.