> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape reveals a range of significant threats and vulnerabilities. Companies are facing substantial losses, with token thefts related to illicit LLM charges costing over $100,000 daily. CISA has identified two critical vulnerabilities in Ivanti Connect Secure, urging immediate remediation. Google has disrupted the XCPE botnet, which was exploiting Android TV firmware. Meanwhile, a new AI-powered infostealer has emerged, effectively ranking stolen data by potential financial value. European supermarkets are grappling with a second wave of cyberattacks on their refrigeration systems, leading to widespread food spoilage. Additionally, the FBI has attributed the recent $6.3 billion Binance cryptocurrency heist to North Korean hackers, intensifying concerns over crypto security.
|
// AI-powered summary generated at 16:00
Today marks the end of support for Windows XP by Microsoft, and the beginning of a bonanza for hackers who will be targeting the vulnerable machines. XP usage has dropped across the board as companies upgrade, but new analysis shows that here’s still plenty of work to be done.
Eight defendants in Florida are facing a 22-count indictment charging them with participating in a conspiracy to steal personal identifying information, and using it to make unauthorized wire transfers from the victims' bank accounts. They are also charged with obtaining unauthorized credit and debi...
Javelin shows you how modern attackers would approach and exploit your enterprise. By simulating real-time, real-world attack techniques, Javelin identifies which employees are most likely to be targets of spearphishing campaigns, uncovers security infrastructure weaknesses, and compares overall vul...
Pop-up ads that come as part of software packages are incredibly annoying, but they can also be dangerous and act as a top conduit for distributing malware. Microsoft is accordingly making some changes to the way it classifies adware, and will begin blocking it from user machines starting in July.
There is a growing global criminal-infrastructure-as-a-service economy being perpetrated through exploit kits and compromised website redirection chains – with billions of attacks adding to cybercriminals' sophistication and ability to evade detection. According to the latest Websense Security Labs...
Have you ever wanted to make a query into a native mode program asking about program locations that write a specific value to a register? Have you ever wanted to automatically deobfuscate obfuscated strings? Reverse engineering a native program involves understanding its semantics at a low level unt...
A series of bots have invaded the Android version of dating app Tinder, and are spreading dangerous downloads after luring users with tempting profiles and pictures stolen from an Arizona-based photography studio.
secunet and Microsoft Germany are showing how a reliable, highly secure and ultra-mobile solution can become reality through a combination of security technology made in Germany and a high-performance tablet.
The trend toward visualizing virtual threat data continues with an interactive cyberthreat map from Kaspersky Lab, which displays cybersecurity incidents occurring worldwide in real time.
The UK’s Information Commissioner’s Office has been asked to investigate alleged breaches of data protection laws after a former employee of Films on Record leaked a 1,000-page dossier of confidential information and source material from the BBC to the Mayor of Tower Hamlets.
A prolific international scheme designed to fleece unwary consumers with bogus sub-$15 charges is making the rounds, according to security researcher Brian Krebs. The common thread? The victims have all paid for online learning tools, but instead have been subjected to multiple junk charges from a c...
Connected cars are continuing to wheel their way into consumer lives, with some, like Elon Musk’s Tesla line of electric vehicles, serving as prototypes for the Internet of Things (IoT)-enabled future. Sleek, sustainable and connected, the Tesla Model S is a futuristic automobile, with a robust set...
The Sally Beauty data breach is likely larger than the 25,000 records the cosmetic supply company originally thought had been compromised. It has issued a statement noting that the unauthorized intrusion into its network it detected on March 5 may have affected a larger number of additional records...
Keeping ahead of web-based threats requires a mechanism to continually search for new types of attacks while understanding existing ones. However, data fragmentation and threat complexity plagues efforts to keep track of all the data related to malware, phishing and other risks – differences in how...
Tax season in both the US and the UK is upon us and it looks like cybercriminals are once more trolling for unwitting victims with thematic phishing emails aimed to those preparing to render unto Caesar.
With an eye toward tackling the cybersecurity workforce skills shortage, the University of Phoenix and the (ISC)² Foundation are teaming up to offer nine full-tuition scholarships for individuals looking to devote themselves to information security.
Bad piggies may need to be toppled, but fans of the ubiquitous Angry Birds mobile app should be aware that the popular game collects and shares players’ personal information much more widely than most people realize.
“Shadowy hacker underworld.” “Dark Web.” “Underground cyber-forum.” These are the phrases that get bandied about referring to those dark corners of the internet where cybercriminals publish their malware, espionage campaigns are hatched and hacktivist manifestos are discussed. The verbiage is decide...
For the first time, NTT has pooled the resources of its group companies and produced a threat report based on an analysis of 3 billion attacks. What it found is that while attackers move faster than defenders, and there are still many basic processes and procedures that companies are failing to impl...
First the NHS was forced to delay its care.data project (storage of all patient GP health data in a central data warehouse) for six months; then it was learned that PA Consulting had obtained 27 DVDs of hospital event statistics (HES) and uploaded them to Google cloud (followed by a complaint being...