> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Ivanti has issued an urgent patch for a zero-day vulnerability in its Connect Secure remote access gateway that is actively being exploited. Additionally, Docker disclosed a severe flaw in Docker Hub that allowed attackers to impersonate users and tamper with container images. GitLab patched a maximum-severity vulnerability allowing unauthenticated code execution on its servers. Multiple vulnerabilities in the Linux kernel were also reported, posing risks for local attackers to compromise systems. In broader trends, North Korean hackers are reportedly targeting Ukrainian experts for intelligence, while small AI models are raising concerns about potential self-replication across IoT devices. Finally, a significant cyberattack on French supermarkets caused widespread food spoilage by hijacking refrigeration systems.
|
// AI-powered summary generated at 16:00
Most single-layer authentication methods are broken and more are being broken all the time, says Gartner analyst Avivah Litan.
IT security and business continuity managers now have another reason to get an iPad or iPhone, as the Environment Agency has released an app to warn businesses and members of the public of the risk of flooding in their area. A version of the free app is also in the works for Google Android and Black...
The Cord Blood Registry (CBR), the nation's largest stem cell bank, admitted that it lost unsecured personal data on 300,000 cord bank clients, a breach that could cost it millions to address.
Research just released by Retail Decisions suggests that cardholder-not-present fraud fell to £239 million last year, a reduction of 10% on the £266 million reported in 2009.
ENISA, the EU's cyber security agency, has published a study on the botnet threat and how to address it.
Research released today claims to show that 49% of businesses in the UK do not have the facilities to remote wipe their employee's mobile devices.
Panda Security is warning internet users to use extreme caution if they see an email advertising job opportunities in the Middle East
Microsoft appears to be counting on the luck of the Irish (Is Bill Gates Irish?) in not patching a zero-day vulnerability in its Internet Explorer (IE) browser for this month’s Patch Tuesday.
The non-profit IT security trade group (ISC)2 is teaming up with M.Tech to deliver information security education classes in Australia, New Zealand, and the Philippines.
Amazon has revealed it will launch its own app store, offering apps to users of Android and other smartphone platforms. The publishing giant also says it will be security vetting all apps before releasing them to users.
The fifth Pwn2Own cracking contest, due to take place later this week at the CanSecWest event in Vancouver, will see code cracker George Hotz - aka Geohot -, the infamous iPhone/PS3 technology cracker, publicly cracking the Windows Phone 7 smartphone platform.
About one third of European smartphone users store credentials to access personal and corporate e-mail on their mobiles, a survey has revealed.
Credit cards with RFID chips provide more data security than cards with magnetic strips, according to a study by the Identity Theft Resource Center (ITRC).
The Russian Chronopay electronic payments system is increasingly being used by scamsters behind fake anti-virus software and 'scareware' applications, says a leading IT security researcher.
Research just released by Barracuda Networks claims to show that the crime rate on Twitter soared by 20% last year, after a quiet period in the latter part of 2009.
URAC, a nonprofit healthcare accreditation organization, has revised its Health Insurance Portability and Accountability Act (HIPAA) privacy and security standards.
Google has removed 55 apps from its Android Market after tens of thousands of users downloaded applications that were infected by the DroidDream trojan, according to numerous news reports.
An interesting lawsuit has popped up with California's RPost, a secure email firm, filing a request for an injunction through the Swiss courts over an alleged breach of its technology patents.
Rob Rachwald, Imperva's security director, says that his company is adding hackers to the old Benjamin Franklin adage that "in this world nothing can be said to be certain, except death and taxes."
Hacktivists seem to have learned a lot from the WikiLeaks/Anonymous attacks seen in recent months, as an automated DDoS attack has reportedly frozen access to BREIN, the Dutch anti-piracy web portal.