> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
A malicious application that conceals spyware and GPS tracking behind a mobile phone game has been discovered in the Android app store.
Although the global downturn slowed security revenue to 7% growth in 2009, organizations globally have indicated their intention to give priority to security budgets, says Gartner.
Research released by credit reference agency Experian claims to show that the careless use of passwords on the internet is creating an identity theft paradise of criminals.
FaceTime Communications has unveiled a software-as-a-service (SaaS) version of its Unified Security Gateway technology, which allows enterprises to gain granular control over the use of Web 2.0 and social networking systems plus services.
The PCI Security Standards Council (SSC) has provided a preview of upcoming changes to two of its standards covering the payment card industry.
Research carried out by the University of Pennsylvania claims to show that it possible to make an intelligent guess as to a smartphone users' handset password by the density and direction of the `smudges' on the mobile's touch screen.
CESG, the national technical authority for information assurance across the public sector, has announced it is adopting the Institute of Information Security Professionals (IISP) skills framework as the basis for its own professional skills and competency programme.
A representative from the Microsoft Security Response Center said the company is investigating the security flaw disclosed earlier this week but that it will not issue a separate advisory based on current information.
In ArcSight’s Silicon Valley office, Rick Caccia, the infosec firm’s vice president of product marketing, tells Infosecurity’s editor, Eleanor Dallaway, that in addition to the constant tide of cybercrime, it’s huge amounts of data that are driving this industry.
Ever since malware writers swapped worldwide infamy for hefty profits, they have become a larger problem to deal with. And, says Ron Clarkson, senior vice president of CoreTrace, as the game of cat-and-mouse with anti-virus software programmers continues, hackers remain one step ahead of their chief...
In ArcSight’s Silicon Valley office, Rick Caccia, the infosec firm’s vice president of product marketing, tells Infosecurity’s editor, Eleanor Dallaway, that in addition to the constant tide of cybercrime, it’s huge amounts of data that are driving this industry.
Three security bulletins were released this week by Adobe outlining security updates for Flash Player, ColdFusion, and Flash Media Server.
Ever since malware writers swapped worldwide infamy for hefty profits, they have become a larger problem to deal with. And, says Ron Clarkson, senior vice president of CoreTrace Corporation, as the game of cat-and-mouse with anti-virus software programmers continues, hackers remain one step ahead of...
Veteran technology professional Jennifer Perry has announced that E-Victims.org, the charity she helped to found three years ago and which assists victims of electronic crime on the internet, is to close due to lack of funding.
McAfee has released the sixth edition of its security journal and has been fortunate enough to have a feature contribution from ex-Washington Post IT security writer Brian Krebs, who has written about his experiences in taking down ISPs and botnets that support cybercriminal activity.
Reports are coming in that the German government is becoming concerned over the security of the 'push' email features of several popular smartphones, including the RIM BlackBerry and the Apple iPhone.
In a move that could upset a few security vendors, Toshiba has announced it has developed a new technology for self-encrypted hard disk drives and protecting sensitive information.
The country’s foreign minister told the AP that Bahrain has no plans to join other Gulf states in threatening to block BlackBerry services.
Google's Android mobile operating system has been hit by its first text-based trojan, according to security firm Kaspersky Labs.
Kaspersky Lab is warning users to check their PCs for the presence of the TDSS rootkit, a nasty piece of code – now in its third iteration – that allows complete, but hidden, 'zombie' control of the host PC.