> TODAY'S SUMMARY (119 articles)
Today's cybersecurity landscape highlights several critical issues and ongoing threats. Siemens has issued 17 advisories for industrial control systems, while Rockwell has patched a vulnerability in their ArmorBlock devices. Microsoft has set a new record by addressing 1,413 vulnerabilities in its latest Patch Tuesday, including zero-days actively exploited. There is an urgent call from U.S. senators for improved federal AI safety and security measures, as AI systems increasingly become targets for exploitation. A recent cyberattack in France compromised IoT-connected fridges, raising alarms about the vulnerabilities of connected devices. Additionally, the U.S. has intensified efforts against North Korean hackers exploiting remote work setups, culminating in arrests tied to laptop farms. Overall, the surge in vulnerabilities and attacks underscores the need for proactive security measures across industries.
|
// AI-powered summary generated at 16:00
Tomorrow is the day that the new PCI DSS 1.2 rules kick in, requiring all level one merchants – defined as firms processing more than 6 million transactions per year – to adhere to the v1.2 security guidelines, or face possible action by their card processor.
Hard on the heels of the spate of Twitter attacks comes news that LinkedIn members are being targeted by carefully crafted fake connection requests that route users to the ZeuS data-downloading malware.
Virtualisation is the key to better information security in cloud computing, says Eric Baize, a board member at cross-industry security initiative, SAFECode.
A number of insurance agents have recently been fined by states for not having a written information security plan in place, and some large insurance firms have reported data breaches involving clients’ personal information. To help address this problem, the Independent Agents and Brokers of America...
The Spamit.com spam affiliate programme, which is responsible for the promotion of spam via a number of outlets worldwide using financial incentives, is to close at the end of this month.
The Stuxnet worm, which has reportedly been successfully targeted at Iranian nuclear plants, is being widely reported as originating from a government agency or well-funded source with political intent. The CEO of Kaspersky Lab, however, says that, whilst there is insufficient evidence to point the...
HP has announced it has completed its acquisition of security firm Fortify Software.
Hackers are using an increasing variety of sophisticated attack vectors to infect internet users PCs, and it seems that infected spam HTML is now being used as a carrier. In its latest attack vector analysis, Barracuda Networks claims that it is now seeing more than a million instances a day of unwa...
Microsoft today launched the second phase of Britain Works, its three-year plan to get half a million people into employment by 2012, reports Personnel Today.
Proposed cybersecurity legislation, a combination of existing bills circulating on Capitol Hill, would give the president power to declare an emergency if there is an imminent cyber threat to the nation’s critical infrastructure.
Google has joined the fight against online sales of counterfeit drugs by taking legal action against rogue pharmacies that advertise on its sites.
The Czech Republic has banned Google from extending its use of the Street View mapping service due to privacy concerns.
An NHS IT manager in Yorkshire has been warned he faces a prison term after he admitted illegally spying on medical records of patients. Data security specialist Imperva says the fact that he was able to do this highlights the need to lock down private data in large organisations, and only allow vie...
UK-based BAE Systems received a $40 million order to provide certification and accreditation services, as well as information security risk assessments, for FBI computer networks.
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
The Twitter micro-blogging service website was apparently hit by an XSS, or cross-site scripting, attack today that took advantage of a mouse rollover vulnerability.
There has been a recent resurgence in plug-and-play (PNP) malware campaigns by spammers after a two-week period of inactivity. The spammers are using what appear to be stolen emails as templates to send out millions of new virulent messages, according to St. Bernard’s Red Condor team.
Microsoft has issued a security advisory confirming exploits of an unpatched vulnerability that affects web applications built on ASP.NET.
Intel is investigating how a master key for its High-Bandwidth Digital Content Protection (HDCP) anti-piracy protocol was published online.