> TODAY'S SUMMARY (44 articles)
Today's cybersecurity landscape reveals significant threats impacting various sectors. A cyberattack targeting refrigeration systems in France has spoiled food across hundreds of supermarkets due to unpatched firmware vulnerabilities. Retail giant Ahold Delhaize has taken its systems offline following a cyber incident, indicating ongoing risks in the retail sector. GitLab has patched a critical vulnerability that could allow unauthenticated remote code execution, emphasizing the importance of timely updates. Additionally, a data breach in Denmark linked to weak passwords has compromised 8.8 million accounts. Emerging malware, such as XWorm RAT, is evolving to offer enhanced surveillance capabilities, posing new risks for user privacy. Lastly, low-cost Android phones are being shipped with pre-installed malware, raising concerns about supply chain security.
|
// AI-powered summary generated at 12:00
The self-styled Iranian Cyber Army was able to hack into the US government-funded Voice of America website and transform the home page into a pro-Iranian banner that instructed the US government to “stop interfering with Islamic countries.”
The UK Identity and Passport Service (IPS) violated the Data Protection Act when it lost the passport renewal applications of 21 UK citizens, according to the Information Commissioner’s Office (ICO).
The Federal Energy Regulatory Commission (FERC) approved flawed cybersecurity standards for the US national power grid and failed to adequately monitor their implementation, according to an audit by the Department of Energy’s Office of the Inspector General (OIG).
Reports that President Obama is formulating plans to develop an internet 'kill switch', following infrastructure issues raised during the aftermath of the Egypt internet shutdown, should be viewed as a red flag to IT security professionals.
It seems that Russian police are working steadily to crush the rising tide of so-called pharma spam campaigns, with one security researcher having heard about a raid on the hackers behind the Rx-Promotions scheme.
A German IT security vendor has discovered a version of Zeus that has been signed with its own digital certificate – a move that could fool some corporates into installing the malware thinking it is a legitimate piece of code.
Credant Technologies has started testing its data encryption technology in the cloud with a select number of beta test clients, promising other cloud security offerings in the near future.
A security researcher has detailed how a flaw has been discovered and exploited on Rapidshare, the world's largest file-sharing service.
Oracle is fixing 21 flaws in its Java SE and Java for Business products in its February critical patch update issued this week.
Research just published claims to show that a failure to invest in secure software delivery is placing businesses at risk
Citicus, a corporate risk management and compliance specialist, has released a risk analysis/management app for the iOS range of Apple devices – the iPhone, iPad and iPod touch.
Integrity and honesty top the list of skills needed for the current and future federal cybersecurity workforce, according to an Office of Personnel Management (OPM) survey.
Research just published claims that end-of-life IT assets - especially portable devices like smartphones and laptops - pose a serious data security threat to many firms.
A new pharma spam campaign uses the Google brand. More than 250 similar blog-related campaigns have been tracked in the last two days.
The West Virginia Attorney General’s Office announced that personal information of 3,655 patients at the Charleston Area Medical Center (CAMC) was placed onto a publicly available website.
Application whitelisting technology is hardly a novel concept – in fact, the technology has been available to enterprises for some years now. But, as GlobalSCAPE executives told Infosecurity at this year’s RSA Conference in San Francisco, application whitelisting for consumers is just around the cor...
Visitors to two websites operated by the BBC were injected by malicious code earlier this week, opening up users to attacks by hackers, claims Websense.
Lumension has released a beta version of its free Application Scanner v2.0 that scans executable files and identifies all applications within the endpoint environment, along with its Endpoint Intelligence Center (EIC) that consolidates malware, vulnerability, patch, and application information with...
Having spoken on the ‘Public, meet private: Lessons learned in chasing cyber crooks’ panel at the RSA 2011 conference in San Francisco, Pedro Bustamante, senior research analyst at Panda Security, tells Infosecurity’s Eleanor Dallaway why geography is obstructing cyber legal justice
User education is often touted as a cornerstone of any effective IT security program. But as Jack Daniel, community development manager with internet security firm Astaro contends, not every organization will reap benefits from educating its end-users.