> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
The University of Maine will spend $2.6 million over the next three years to beef up information security following a data breach last year that exposed personal information on 4585 students and alumni who had visited the university’s counseling center.
Statistics Canada has experienced a number of recent data breaches that have exposed sensitive information of Canadian citizens, but has failed to report the breaches publicly, according to internal agency documents.
The latest analysis of Christmas and New Year malware attacks claims to show that cybercriminals took advantage of the holiday shutdown to stage a series of themed attacks.
The Defense Information Systems Agency (DISA) is expanding the use of its “demilitarized zone” (DMZ) to protect information on the Department of Defense’s unclassified network. The move aims to prevent attacks from the web while maintaining internet access for DoD users.
The memo by US intelligence officials urging government agencies to set up insider threat programs in response to WikiLeaks applies to all organizations, says security firm Imperva.
The threat landscape is evolving and, as a result, botnets and cross-platform security threats will head up the security threat list for 2011, according to ESET, the Slovakian IT security vendor.
Information security researcher Billy Rios has developed a method for bypassing an Adobe sandbox that is designed to prevent Flash files from being used as launching pads for attacks on computers.
The Information Commissioner's Office (ICO) has found the Scottish Court Service in breach of the Data Protection Act for failing to prevent court documents containing personal data being accidentally disposed of at a local recycling bank in Glasgow.
Just over three quarters of the UK population have sold on old mobile phones, but only 31% wiped all personal information before selling, a survey has revealed.
The Australian Crime Commission (ACC), a government security agency, is reporting on a new fraud trend that the country's national criminal intelligence agency calls 'virtual crime'.
Panda Security's research arm, Panda Labs, claims that 34% of all malware ever created was coded/created during 2010.
Federal workers were sent fake White House Christmas e-cards containing Zeus malware designed to gain access to computer systems and steal sensitive documents.
Joona Airamo, the CISO at Stonesoft, a Scandinavian IT security vendor, is predicting that the coming year will see a malware infection that targets the Apple operating system.
Virgin Media says that its research suggests that consumer gadgets topped the Christmas stocking gift list with millions shifting from the shelves before the VAT increase.
American Honda Motor Co. is warning around 2.2 million customers that an email database containing personal information was hacked, according to reports.
BlackBerry maker Research in Motion (RIM) has offered lawful interception in its security architecture through cloud computing from Indian operators, according to the India Times.
A US security researcher has revealed a number of new security flaws in the Adobe PDF file format. The flaws, says Julia Wolf, a researcher with California's FireEye, have been around for some time, but have not been reported on.
Cybersecurity has become a “fundamental weakness” in Australia’s national security, and the threat is not well understood by political leaders and the public, according to a report by a leading Australian think tank.
The Geinimi trojan is attacking Android smartphones and stealing personal data from them, according to mobile security firm Lookout.
A row that has been brewing between the payment card 'establishment' and researchers with Cambridge University, who have previously claimed that the Chip & PIN security system seen in UK bank payment cards is flawed, has spilled out into the open.