> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Composer Roger Davidson was scammed out of millions of dollars after he brought his laptop into a computer repair shop in Westchester County, New York, in 2004 to get rid of a virus.
The fact that social networking portal has more than 500 million members attracts attacks like moths to a flame. Trend Micro's Rik Ferguson has seen an interesting new twist to phishing this week on the site.
Armed forces minister Nick Harvey is to expand on recent announcements on UK cyber defences in London today.
One of the websites operated by the Royal Navy was shut down yesterday, after a hacker called TinKode gained unauthorised access to the server using an SQL injection attack.
The latest monthly analysis of the malware landscape from Kaspersky Lab shows that the ZeuS trojan continued to strike, as it became one of the most commonly used and best-selling spy programmes on the online black market.
More than 30 people built Stuxnet worm, noted Brian Tillett, information security researcher at Symantec. Stuxnet has attacked a range of targets including Iranian nuclear facilities and Chinese computers.
The Information Commissioner's Office (ICO) is preparing to impose fines on companies that break provisions of the Data Protection Act later this month, the information commissioner, Christopher Graham, has said.
A serious distributed denial of service (DDoS) attack has effectively taken the country of Burma offline. The attack, which started on Tuesday, has reportedly clogged up the country’s main 45 Mbps internet feed, with DDoS packet rates of between 10 and 15 Gbps.
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
The SpyEye trojan, which is competing for criminal “business” with Zeus, has seen a recent surge in activity, according to Lance James, a security researcher at Damballa.
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
The Tokyo Metropolitan Police is investigating a large leak of sensitive international anti-terrorism documents – including names and addresses of informants – that were placed on the internet, according to Japanese press reports.
Google has won preliminary court approval to settle a class-action lawsuit related to alleged privacy violations caused by its Buzz social networking service.
The Center for Internet Security (CIS) released an updated version of its information security metrics developed through the consensus of 150 information security experts in the public and private sectors.
The Federal Bureau of Investigation (FBI) arrested a 31-year-old California man for hacking into victims’ computers, downloading explicit photos, and then using the photos to extort more photos and videos from the victims, who were usually teenage girls.
The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has issued an industry alert to SCADA systems operators and other interested parties that many SCADA installations can now be located on the web using the SHODAN public search engine.
Vulnerability specialist Idappcom has released a freeware version of its Traffic IQ Pro security audit and penetration testing software.
A new distributed denial of service (DDoS) trojan, which attacks blogs and forums that criticize the Vietnamese Communist Party, is part of an increasing trend of politically motivated cyber attacks, according to Joe Stewart, director of malware analysis at SecureWorks’ Counter Threat Unit.
Internet security firm Webroot has acquired Derby, UK-based anti-malware cloud provider Prevx.
US internet security firm Webroot has acquired Derby-based anti-malware cloud provider Prevx.