> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
Lumension has released a beta version of its free Application Scanner v2.0 that scans executable files and identifies all applications within the endpoint environment, along with its Endpoint Intelligence Center (EIC) that consolidates malware, vulnerability, patch, and application information with...
Having spoken on the ‘Public, meet private: Lessons learned in chasing cyber crooks’ panel at the RSA 2011 conference in San Francisco, Pedro Bustamante, senior research analyst at Panda Security, tells Infosecurity’s Eleanor Dallaway why geography is obstructing cyber legal justice
User education is often touted as a cornerstone of any effective IT security program. But as Jack Daniel, community development manager with internet security firm Astaro contends, not every organization will reap benefits from educating its end-users.
While nation-states actively attempt to exploit the networks of the US government, critical infrastructure, and commercial networks, US Deputy Secretary of Defense William Lynn told the RSA Conference audience that terrorist groups are inevitably more likely to fire the most severe type of destructi...
Security researcher Brian Krebs has had a long-standing interest in the increasing problem of ATM skimmers - fraudsters who install hidden gadgets on cash machines with the intention of ripping off bank card customers. And he has posted an in-depth analysis of one such scam earlier today.
Panda Security has launched a senior citizens' safer internet campaign, with the aim of educating people over 60 on how to make their internet activities more safe.
The New York City Health and Hospital Corp. (HHC) said that personal information of nearly 1.7 million hospital patients, staff, vendors, and contractors was stolen from a GRM Management Information Services van.
It's day two of the RSA Conference in San Francisco and Commtouch has taken the wraps off what it claims is the industry's first unified engine that combines three internet security technologies.
As the keynote presenter at the Cloud Security Alliance Summit today in San Francisco, Marc Benioff, chief executive officer of salesforce.com, introduced his vision of ‘Cloud 2’. “The best days are still very much ahead of us in this industry”, he told the audience.
Reports are coming in the New South Wales (NSW) ambulance dispatch system was downed at 1pm local time on Saturday by a computer virus, forcing dispatch officers to move to a back-up paper-based system.
F-Secure has released version 7 of its Protection Service for Mobile (PSM 7) which extends the smartphone security software-as-a-service (SaaS) platform to support Google Android and Symbian handsets.
With mobile and application security on more agendas than ever before, Veracode’s CEO, Matt Moynahan, talked to Infosecurity’s Eleanor Dallaway about why Microsoft are doing security better than Symantec, why Apple will be raising their eyebrows in embarrassment, and why really good coders with secu...
Reports are coming in that a team of German researchers have successfully shown how to crack the security of a stolen iPhone in under six minutes.
The Department of Homeland Security is setting up an IT forensics clearinghouse called CyberFETCH to provide a secure collaborative environment for law enforcement, private industry, and academia.
Reports are coming in that a team of German researchers have successfully shown how to crack the security of a stolen iPhone in under six minutes.
The National Identity Register (NIR), which was built to hold the fingerprints and personal details of millions of ID card holders, has been publicly destroyed.
In addition to patching flaws in Reader and Acrobat with its latest quarterly update, Adobe has addressed security flaws for Flash, Shockwave and Cold Fusion.
Visa is encouraging merchants to adopt EMV-compatible chip terminals capable of processing either contact or both contact and contactless payments as part of a Payment Card Industry Data Security Standard (PCI DSS) compliance program.
Hackers from China have attacked the computer networks of global oil companies with the intention of stealing information.
A white paper just published claims that organisations that choose not to notify on data breaches are living on borrowed time.