> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
Google's Android mobile operating system has been hit by its first text-based Trojan, according to security firm Kaspersky Labs.
San Diego-based St. Bernard Software recently announced its purchase of email security firm Red Condor.
Terry Childs, a former city of San Francisco network administrator, received a four-year sentence on Friday for his earlier conviction on computer tampering charges.
There are signs that hackers are again turning to the recurring avenue of using attractive image files as a means to persuade internet users to infect their machines, through the usage of downloadable links to 'allow' users to view the files.
Reports from DefCon 2010 last weekend showed how it is possible to persuade a mobile phone to log into a rogue base station created using around $1,500 worth of hardware. And, says an IT security vendor, this highlights how the 'evil twin' hacking methodology used on WiFi networks can be redeployed...
The exploit for Adobe Reader and Acrobat unveiled by researcher Charlie Miller at last week’s Black Hat conference in Las Vegas has been confirmed by Adobe, which says it will issue an out-of-band patch for the exploit by mid-August.
Security writer Brian Krebs says he has conducted a straw poll and analysis of the top IT security applications and found that large numbers of them fail to utilize the standard security features of Microsoft Windows.
The European Commission has announced a new schedule for the revision of the European Union Data Protection Directive, delaying legislative proposals for over a year, according to the French Information Commissioner's Office, CNIL.
Security writer Brian Krebs says he has conducted a straw poll and analysis of the top IT security applications and found that large numbers of them fail to utilise the standard security features of Microsoft Windows.
Apple has advised users of all its mobile devices that run on iOS to avoid opening PDFs until a fix is released for a newly discovered flaw.
Apple has advised users of all its mobile devices that run on iOS to avoid opening PDFs until a fix is released for a newly discovered flaw.
From their Silicon Valley office, David Perry, global education director of Trend Micro, told Infosecurity that it’s no longer sufficient to detect code, but instead, it’s more productive to detect the source of the code.
Microsoft plans to release an emergency security update for Windows today to patch a recently reported vulnerability in the way the operating system creates desktop shortcuts.
Research just released claims to show that a growing number of small to mid-sized businesses are starting to embrace the benefits of cloud computing technology, with 14% having adopted the platform by the end of June of this year.
Today sees anti-spam specialist Cloudmark launching its free standalone spam filter – Cloudmark DesktopOne. The software, which has been on beta test since April of this year, is unusual in its ability to filter webmail services, as well as POP3 and IMAP email.
The world’s largest dedicated IT security firm became just a little bit bigger today, as McAfee announced plans to purchase tenCube, the privately owned provider of the WaveSecure mobile security service.
In his keynote at Black Hat, 29th July 2010, retired General Michael Hayden, who served as director of the CIA and deputy director of National Intelligence, says cyber warfare was inevitable considering the internet has not been built with defense in mind.
Rather than consulting a crystal ball, the Information Security Forum (ISF) looked to experts in the field – including those from its member organizations – to develop a set of security risk predictions for 2012 and beyond.
Jailbreaking Apple iPhones to bypass code aimed at limiting the applications and carriers owners can use is unlikely to violate EU copyright laws.
Qualys has taken the wraps off BlindElephant, an application security utility that analyses web applications running on company systems and is billed as allowing security professionals and systems administrators to identify everything running on their servers, including any web applications users ma...