> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Ivanti has issued an urgent patch for a zero-day vulnerability in its Connect Secure remote access gateway that is actively being exploited. Additionally, Docker disclosed a severe flaw in Docker Hub that allowed attackers to impersonate users and tamper with container images. GitLab patched a maximum-severity vulnerability allowing unauthenticated code execution on its servers. Multiple vulnerabilities in the Linux kernel were also reported, posing risks for local attackers to compromise systems. In broader trends, North Korean hackers are reportedly targeting Ukrainian experts for intelligence, while small AI models are raising concerns about potential self-replication across IoT devices. Finally, a significant cyberattack on French supermarkets caused widespread food spoilage by hijacking refrigeration systems.
|
// AI-powered summary generated at 16:00
In 78% of online fraud incidents, banks failed to catch the illegal transfer of funds or other malicious activities, such as identity theft, according to a survey commissioned by Guardian Analytics.
Most organizations fall short in training their workers in information security best practices, according a report by the IBM Center for the Business of Government.
As tablets and smartphones continue to proliferate, the companies that sell and market security suites have already begun shifting their focus toward mobile security. With many apps to choose from – both paid and free – Infosecurity was provided with insight into Webroot’s new security app for Andro...
Reports are coming in that LiveJournal, one of the key web portals for uncensored political discussion in Russia, suffered from a series of major DDoS attacks last week.
Neustar has developed what appears to be one of the industry's first cloud-based anti-DDoS attack technologies. Known as SiteProtect, the cloud-based IP defence service is designed as an add-on for the firm's UltraDNS clients.
Google has announced it is to put additional protection against malicious downloads in its Chrome browser.
The Wikileaks-inspired Anonymous hacktivist group has announced plans to stage a series of DDoS attacks against various Sony sites. The attacks are in retaliation, the group says, for the legal action against George Hotz, the famous hardware cracker.
The London Clinic, the UK's largest independently owned non-profit hospital with 270 beds, has announced it has significantly enhanced its IT disaster recovery systems, as well as improving data access to its clinical staff across the hospital campus.
A Gucci network engineer who was fired by the company used his expertise and insider access to wreck havoc on the IT systems of the Italian fashion house, according to an indictment by Manhattan District Attorney Cyrus R. Vance Jr.
Research just released by Informatica claims to show that 74% of financial firms have admitted to a lack of confidence or uncertainty in their organisation's capabilities when it comes to protecting customer information in the development stages.
Low enterprise adoption of data loss prevention (DLP) technology will cause businesses to fail, the research firm cautions.
Low enterprise adoption of data loss prevention (DLP) technology will cause businesses to fail, the research firm cautions.
Internet radio company Pandora Media has been asked for documents related to a federal grand jury probe into information sharing by smartphone applications that run on Apple and Android mobile platforms.
The Lizamoon mass SQL injection attack in which rogue code was injected into thousands of legitimate sites to lure users to malicious sites has claimed few victims.
With the dust now settling on the Epsilon marketing database breach, it seems that around 50 companies have been directly affected by the hack, raising fears that so-called spear phishing attacks may be the result.
Just two months after the Zeus source code was reportedly offered for exclusive sale for $100,000, it seems that the code is now being offered at bargain basement prices through multiple outlets.
An upset Xbox gamer has publicly hacked the Xbox Live policy and enforcement director's online account, posting a YouTube video and claiming that the use of foreign customer support centres means that almost anyone's Xbox account can be hacked.
The latest quarterly malware report from Panda Security claims to show that smartphone malware dominated the security landscape, as witnessed by the rash of Google Android infections.
The Lizamoon mass SQL injection attack in which rogue code was injected into thousands of legitimate sites to lure users to malicious sites has claimed few victims.
The breach of RSA’s SecureID two-factor authentication product was accomplished through a vulnerability in Adobe Flash Player, the company has revealed.