> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
A new trojan called Ares has been identified as a potential successor to the notorious Zeus trojan that has been employed to steal credentials used in millions of pounds in theft.
Leading IT security researcher Moxie Marlinspike has reportedly been placed on a US federal watch list, possibly as a result of being friends with Jacob Appelbaum, the high-profile WikiLeaks volunteer and security researcher, who was detained on an international flight into the US in July of this ye...
Software security firm Sophos has released a list of the 20 most commonly detected types of malware for Mac users. Topping the list is Mal/ASFDldr-A, malware that comes in the form of malicious media files.
The Department of Homeland Security (DHS) is launching a cybersecurity center for state and local governments that will cooperate with DHS's National Cybersecurity and Communications Integration Center (NCCIC).
You might think that, with IT security awareness rising amongst members of the public, that the general level of security whilst shopping online might also be rising. But according to research just published, this doesn't appear to be the case.
Leading IT security researcher Moxie Marlinspike has reportedly been placed on a US federal watch list, possibly as a result of being friends with Jacob Appelbaum, the high-profile WikiLeaks volunteer and security researcher, who was detained on an international flight into the US in July of this ye...
The US Air Force has warned troops that using location-aware applications on social networking sites could have "devastating" consequences for military operations.
The role of privileged account security is the subject of Infosecurity's upcoming webinar, which takes place next Thursday afternoon. Speakers lined up for the event include Bob Tarzey, an analyst and director with Quocirca, as well as Richard Walters, chief technology officer with Overtis, the spon...
Digital Rights Management (DRM) technology is not only being used to protect organisation's intellectual property rights, but is now also needed in the data archiving industry, says a DRM expert.
A German hacker has successfully cracked a six-character implementation of the 160-bit SHA-1 crypto algorithm using a cloud computing resource. The hack was completed in 49 minutes at a cost of just $2.10.
Private companies may be required to open up data and make their activities answerable to Freedom of Information (FoI) law when they are contracted to work for the public sector.
The organisers of this year's 5th Global Security Challenge have announced the two winners of the competition, which means the pair of firms – classed as most promising security companies in the world – will share $500 000 investment provided by the US Department of Defense.
Fraudsters on eBay are reportedly side-hacking the Kodak Gallery service using a fake redirect technique.
After plundering users' online bank accounts using stolen credentials, it seems that the continually evolving ZeuS malware is now targetting company data assets via their enterprise access gateways.
Nearly all of the security professionals surveyed by Solera Networks said they need real-time situational awareness, known as network forensics, to make their networks more secure, yet only 19% said they have this capability.
The desktop security business model needs to evolve to actually prevent new malware infections, not just block old ones or clean up already infected machines. This is according to Comodo CEO and president Melih Abdulhayoglu.
The latest version of a rootkit targeting Microsoft Windows has begun hitting 64-bit versions of the operating system.
Rather than speaking solely about the business challenges inherent with cloud security, Microsoft’s Scott Charney chose to address the social implications of cloud-based computing during his opening keynote address at today’s Cloud Security Alliance (CSA) Congress in Orlando.
Police have forced the suspension of a website that offered advice to students photographed at last week's student fees demonstration in London.
A data breach at Holy Cross Hospital in Ft. Lauderdale, Fla., resulted in the theft of sensitive information concerning 1500 patients who visited the hospital’s emergency room.