> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Reports are coming in that the FBI has identified a 23-year-old Russian as the lynchpin behind the infamous Mega-D botnet, which has been responsible for as much as a third of all spam generated around the world.
Visa Europe has announced plans to use the location of a cardholder's mobile phone to better detect fraud using its payment cards. The card company has reportedly contracted with ValidSoft, part of the ElephantTalk telecoms group, for the service.
With the growth in the popularity of virtualization comes attendant security risks, noted a recent white paper from the global IT association ISACA.
Russia has finally buried the US…in spam. Russia topped the list of sources of global spam, with the US a distant 18th, according to Kaspersky Labs’ October spam report.
An IT security researcher claims to have uncovered a sophisticated mass injection attack that uses a polymorphic obfuscation attack vector, and has been used to target WordPress blogs at a US-based hosting provider.
Despite a lot of discussion in the media, it seems that only 10% of security organisations in Europe and North America are planning to implement network access control (NAC) technology in the next 12 months.
US and UK authorities are tightening their control of the internet in their fight against copyright pirates and counterfeiters. But their moves may reverse the principle that people are innocent until proven guilty, and open the way to censorship of online material such as the diplomatic cables publ...
The hacker who took down the WikiLeaks site just hours before it was set to publish leaked US documents used a relatively small-scale, application-level distributed denial of service (DDoS) attack, according to Craig Labovitz, chief scientist at Arbor Networks.
Iran's president, Mahmoud Ahmadinejad, has confirmed that the Stuxnet computer worm affected centrifuges in the country's uranium enrichment program.
IBM has launched an apprenticeship scheme for 15 school leavers in a bid to develop its current and future workforce.
A G20 country will be hit by major cyber attack by 2015, Garter predicts.
UK-based defense firm BAE Systems has agreed to acquire stratsec.net, an Australian cybersecurity consulting firm, for around $23 million.
Reporting on the Stuxnet malware has reached new heights - or lows, depending on your point of view. According to David Harley, a security research fellow with Eset, the Sky News video report on the malware of late last week was more 'planet fantasy' than anything else.
Entrepreneurs Richard Branson and Rupert Murdoch are to launch rival publications exclusively for Apple's iPad.
Although it was thought that the Bredolab spamming botnet was brought down fully as part of a Dutch takedown last month, it appears that elements of the botnet have continued until this week.
PhishMe, a provider of information security training software, is offering a free version of its “phishing game” to educate online shoppers about the increased threat from phishing attacks on Cyber Monday.
Rep. Bennie Thompson (D-Ms.) has introduced a cybersecurity bill that would give the Department of Homeland Security the authority to require critical infrastructure firms to submit cybersecurity plans to the agency.
The non-profit infosec certification body, (ISC)², has announced the formation of an international Application Security Advisory Board to address the issue of insecure software development.
Australian utility EnergyAustralia plans to conduct a trial of long-term evolution (LTE) technology “as an alternative wireless technology” to the WiMAX technology currently being rolled out for its smart grid wireless broadband network, according to the utility.
Software supplier Novell, once one of the most influential companies in corporate IT, is to be acquired for $2.2bn by Attachmate, a software firm owned by a group of investment companies.