> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
It's been a while since the loosely-grouped Anonymous hacking group caused a sensation by organising a series of DDoS attacks against a number of high profile financial sites linked with snubbing WikiLeaks.
Oracle has released a staggering 66 new fixes across 28 product lines in its January 2011 security advisory.
Research in Motion (RIM) will introduce partitioning software on its BlackBerry smartphone devices to allow users to separate personal and corporate data.
Dozens of military, government and education websites have been hacked and are up for sale, according to researchers from Imperva's Hacker Intelligence Initiative (HII).
Researchers from AppRiver are reporting 'opinion poll' emails arriving on the internet, supposedly from fast food outlet McDonald's, and offering recipients the prospect of a $250 reward.
Guidance Software, the company behind the popular range of EnCase digital forensics software, has extended/ported the forensics application to support the Apple iPad, iPhone 4 and iPod touch.
Google co-founder Larry Page is to take over as chief executive in April from Eric Schmidt, who will then become executive chairman.
The European Commission (EC) has suspended trading in carbon credits after unknown hackers compromised the accounts of Czech traders and reportedly siphoned off around 28 million euro worth of carbon credit certificates.
Internal fraud poses an increasing risk to financial institutions, according to a report from the Aite Group.
The Stuxnet worm was an Israeli-US project developed at the highly secretive Israeli Dimona complex in the Negev desert to sabotage Iran’s nuclear program, according to a report in the New York Times.
Google has announced that Iranians will be able to download Google Earth, Picasa and Chrome, available for the first time following the easing of US export controls.
Bohu, a new type of malware, is attacking cloud-based anti-virus (AV) technology from popular suppliers in China.
Computer Sciences Corp. (CSC) will provide network intrusion detection and prevention services to the US Air Force’s 33rd Network Warfare Squadron under a five-year, $30 million contract.
Infosecurity magazine is delighted to welcome the newest addition to our roster of bloggers – the Cloud Security Alliance.
Prosecutors have filed charges against two men for hacking into AT&T’s website and stealing email addresses and other personal information of 120,000 iPad users.
Hackers are targeting Las Vegas casinos’ customer databases in order to gain access to personal financial information or steal players club points, according to gaming regulators.
Heavy lobbying, lurid language and poor analysis are inhibiting government planning for cyber protection, says a new report on Systemic Cyber Security published by the Organisation for Economic Cooperation and Development (OECD).
Nine NHS trusts across Cumbria and Lancashire are to collaborate on the deployment of a single identity management system.
Non-profit IT trade association CompTIA has amended its approach to professional education, as the group announced changes to its certification process that includes a continuing education program.
Symantec is warning that attack toolkits are making it easy for technically unsophisticated criminals to launch attacks against websites that result in the theft of millions of dollars.