> TODAY'S SUMMARY (105 articles)
Today's cybersecurity landscape highlights several significant threats and trends:
1. A critical vulnerability (CVE-2026-21589) in multiple Atlassian products is being actively exploited, prompting urgent patching efforts from the company. This flaw allows unauthenticated access to sensitive files.
2. The FBI and Secret Service issued warnings regarding the FortiBleed campaign, which has compromised over 86,000 Fortinet devices, locking out administrators and stealing credentials.
3. A new malware strain, PoeLLM, has created a botnet by infiltrating over 3,400 servers, cleverly disguising its infrastructure within a poem.
4. Data breaches continue to escalate, with Georgia Power and Alabama Power confirming unauthorized access to 400,000 customer accounts, and a separate breach affecting over 1 million individuals in Arizona's court system.
5. Ransomware attacks are increasingly targeting backup infrastructures, complicating recovery for victims and heightening the pressure to pay ransoms.
These developments underscore the critical need for robust security measures and prompt updates to protect against emerging threats.
|
// AI-powered summary generated at 16:00
Infosecurity professionals will see improved job opportunities in 2008, according to the SANS Institute. The US-based organisation believes that as senior executives in government realise that their systems have already been compromised, and that they do not control those systems, they will react by...
The UK’s Financial Services Authority has fined life assurance company Norwich Union Life £1.26 million ($2.54m, €1.77m) for “not having effective systems and controls in place to protect customers' confidential information and manage its financial crime risks” (statement).
Cyber criminals have shifted their aim from flaws in commonly-used software to problems with custom-built applications, and are also targeting easily-misled users, according to the SANS Institute’s revised top 20 internet security risks.
Several banks are adopting voice biometric technology, while BT is preparing to offer an internal service commercially, according to exhibitors at the first European Voice Biometrics Conference, held in London on 28 and 29 November.
The UK government has lost personal data on every child in the country, as well as national insurance numbers and bank account details of parents and carers claiming child benefit, on two password-protected CDs sent through an internal mail service.
The UK government has lost personal data on every child in the country, as well as national insurance numbers and bank account details of parents and carers claiming child benefit, on two password-protected CDs sent through an internal mail service.
The UK information commissioner’s office (ICO) has asked the government to make serious breaches of the Data Protection Act a criminal offence, rather than attracting fines as at present.
When building an information security team, it is just as important to recruit on the basis of personality as it is to find someone with the right technical qualifications, according to Peter Berlich, a director of (ISC)2.
New biometric technologies and plans for increased surveillance are jeopardising society’s right to liberty and privacy, argued David Murakami Wood, managing editor of Surveillance & Society, at the Biometrics 2007 conference on Friday 19 October.
A fingerprint recognition system failed to prevent black-listed fans from entering football grounds and was easily fooled by simple spoofing techniques, according to a trial by Dutch research organisation TNO.
Finding the right balance between internet security and privacy is becoming increasingly hard when addressing cyber terrorism, experts at last week’s annual ISSE conference argued.
Biometrics has changed in several significant ways over the last decade, according to a prominent expert in the field.
Users of IT security products should see no gaps in service resulting from floods in Britain, despite the location of several vendors in some of the worst-affected towns.
Google is buying its way into the infosecurity market, through purchasing security service provider Postini for $625 million (£310m, EUR458m) in cash, it said on 9 July.