> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
Hackers exploited close to twice as many vulnerabilities as usual in January, half of those being “critical”, according to Fortinet’s monthly threat landscape report.
The Federal Trade Commission is requiring three credit report resellers to strengthen their data security procedures and submit independent audits every other year for 20 years as part of a settlement with the agency.
Next week's patch Tuesday will, says Lumension, lead to 900 million reboots of Windows machines around the world. Sadly, whilst this sounds a rather large power-draining volume of unnecessary PC actions, the reality is that it's not that abnormal.
It looks as though Adobe's new Reader X incorporates a number of security features that block exploits that cybercriminals have tapped in previous Reader viewer applications. Sophos is reporting that its research team has tested the viewer and found that it locks down malicious PDF spam in is tracks...
The N-DEx search engine, which the FBI revealed back in 2008 as a means for US law enforcement agencies to carry out Google-style searches on multi-agency databases, is about to go live in the US.
Reports are coming in that the Egyptian government is using elements of the emergency national broadcast network to pipe tens of thousands of pro-Mubarak text messages on the network of Vodafone Egypt.
The National Institute of Standards and Technology (NIST) has issued the final version of its recommendations for securely configuring and using full virtualization technologies, which allow multiple operating systems to run on a single platform.
A white paper just published by Corsaire claims to show that multiple authenticators - such as PIN codes with security questions – are still not enough to protect private data.
Trusteer says that its research into the Zeus malware and botnet command and control (C&C) servers that control the swarms of infected internet users shows Russian and US top level domains are now the main home of C&C infestations.
New name, and new vision – that was the crux of the explanation delivered by the chief executive of the security firm formerly known as BoxSentry.
Apple is being sued again over alleged disclosure of its mobile devices’ unique device identifiers (UDIDs) to third parties without users’ consent.
A flood of celebratory and congratulatory tweets on Twitter has greeted the news that internet services have been restored in Egypt.
Software quality would be much better if programmers adopted "literate programming", according to Stanford University's unique professor emeritus for the art of computer programming, Donald Knuth.
Software quality would be much better if programmers adopted "literate programming", according to Stanford University's unique professor emeritus for the art of computer programming, Donald Knuth.
Google and Twitter have joined forces to enable Egyptians to tweet using the phone to bypass a government-imposed internet blackout.
No matter which team you root for in the Super Bowl this Sunday, be careful of scams that might be lurking in your trash-talking tweets or other online communication, warns Mark Maciw, web product manager at Clearswift.
Researchers at North Carolina State University have discovered a flaw in the Android 2.3 Gingerbread mobile operating system that allows hackers to gain access to information on the phone's microSD storage card.
Source code that apparently relates to v8 of Kaspersky anti-virus has appeared on BitTorrent and other file-sharing sites in the last few days. According to news wire reports, the source code was leaked by an employee of the IT security vendor who is now in jail for intellectual property theft.
Research published today claims to show that the increasing problem of distributed denial of service (DDoS) attacks has been made worse by a tendency to misconfigure firewalls and intrusion prevention systems (IPS).
Privately held network communications supplier NewNet Communication has acquired another business from within its own parent company – secure transactions provider Traxcom Technologies. The move is expected to strengthen the security of NewNet’s mobile commerce offerings.