> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Websense has posted a detailed analysis of the Phoenix Exploit kit, which is used by hackers to seed and infect users' PCs across the internet, and then monitor the results for data harvesting.
Computer technician Leon Walker faces five years in jail for hacking into his wife’s email account to confirm suspicions that she was having an affair with her ex-husband.
Mozilla, the developer of the Firefox browser, admitted that it accidentally posted sensitive information about the users of its addons.mozilla.org site to a public web server.
Because of a major increase in cyber attacks this year, the German government plans to set up a national cyber defense center in 2011.
British defense firm BAE Systems has agreed to acquire ETI A/S, a Danish cybersecurity firm, for approximately $212 million.
Incoming Speaker of the House, Rep. John Boehner (R-Ohio), has tapped Rep. Mac Thornberry (R-Texas) to lead a cybersecurity initiative in the next Congress.
A number of VA facilities have violated the Department of Veterans Affairs (VA) prohibition on using online tools to share patients’ information among facilities.
Although military-grade encrypted VOIP software for the iPhone has been around for while, the highly specialised software has been quite expensive, typically running into three figures. Now a Florida-based firm has released a 256-bit encrypt VOIP app for the iPhone costing just $4.99.
The Federal Trade Commission (FTC) has approved Intel's $7.7bn acquisition of security software giant, McAfee.
IT security software vendor BitDefender has linked up with peer-to-peer data development company BitTorrent – which developed the file-sharing protocol of the same name – to offer the 80 million estimated users of the protocol an integrated malware detection service.
Inadvertent disclose of sensitive information by well-meaning workers will pose the greatest information security threat to organizations in the coming year, according to Frank Kenney, vice president of global strategy at Ipswitch.
Google has deleted all UK payload data collected by its Street View cars from unsecured British WiFi networks, the company has confirmed.
The Defense Advanced Research Projects Agency (DARPA) is undertaking a number of cybersecurity research and development projects for the Department of Defense designed to prevent surprise cyberattacks.
Kaspersky Lab's malware analyst Alexei Kadiev has posted an interesting analysis on how the Bredolab botnet – which infected around 30 million PCs at its height – functioned.
Security researchers from Symantec claim to have spotted a new crimeware toolkit being sold in the underground marketplace. The toolkit – known as Dream Loader – generates a trojan that is exclusively used to distribute malware.
Hotmail is claiming it can now tackle its biggest security issues with a way to send and receive active e-mail messages.
Shlomo Kramer is well known in the IT security industry for being a co-founder of Check Point and, more recently, has been CEO/president of data security specialist Imperva. Infosecurity caught up with him in London this week for his observations – and predictions – on what will be the main IT secur...
A new feature on Facebook is, at the very least, questionable, and may even be a social networking risk, says a leading IT security researcher.
Wondering what to give your loved one who just happens to be an information security professional? Why not give him or her the 12 principles of information security developed by the three leading information security organizations.
Bank of America recently won a ruling blocking four former employees of its U.S. Trust unit from using the bank’s client information at their new employer, Dynasty Financial Partners.