> TODAY'S SUMMARY (33 articles)
Today's cybersecurity landscape reveals significant threats and trends as follows:
1. A former employee was sentenced to 32 months in prison for holding his employer's network hostage using scheduled tasks, demanding 20 bitcoins.
2. Research indicates that billion-dollar companies are twice as likely to leave critical vulnerabilities unpatched due to operational pressures.
3. Major updates from Microsoft addressed a record 1,413 vulnerabilities, including an actively exploited zero-day flaw in Windows.
4. Citrix, Fortinet, and Ivanti issued patches for 29 vulnerabilities, some allowing critical security breaches.
5. Ransomware attacks are becoming increasingly personal, with 37% involving psychological or physical threats against victims.
6. Google has increased its Chrome bug bounty program's payouts, reflecting a growing emphasis on securing web browsers against exploitation.
These trends highlight ongoing challenges in vulnerability management and the evolving tactics of cybercriminals.
|
// AI-powered summary generated at 08:00
In an effort to fix what they called a “badly broken” immigration system in the US, two senators have proposed the use of biometric Social Security cards for all workers.
Google has launched a security tool called skipfish, designed to help web developers scan their applications for vulnerabilities.
Network Box USA has announced a change in the way that it sells unified threat management appliances. It is switching to a managed service model, and is no longer charging for its hardware.
A study just published claims to show that, although 78% of children knowing that hacking it is wrong, one in four of them have tried hacking into other people's Facebook accounts.
Facebook is to set up a non-profit foundation to promote and develop the online privacy movement under a legal settlement reached this week.
You've heard about Apple potentially bricking iPhones, but that's small potatoes, compared to remotely disabling whole fleets of cars using centrally controlled computer systems. That's just what a 20-year-old employee for a Texas auto dealership is being accused of doing after he was laid off last...
ISO has published two new documents outlining principles and guidelines for secure archiving of electronic medical record data.
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.
Ipswitch has launched the WhatsUp Event Log Management Suite, including its newly acquired WhatsUp Event Rover 3.0, two tools that it hopes will make it easier for customers to manage their networks by logging security events, while protecting files for forensic investigations.
The Federal Communications Commission unveiled its new National Broadband Plan to the public yesterday, and shortly thereafter submitted its recommendations to the US Congress.
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.
DVD rental company Netflix has quietly cancelled a sequel to its Netflix Prize, a contest to enhance its movie recommendation technology using anonymous user data.
After several months of quietly hiring staff in the European IT security industry, Sunbelt Software has opened a new sales and research centre in Marlow.
The St. Louis Metropolitan Police Department is investigating a cyber attack that may have compromised the information of 24 people.
Researchers claim to have broken 1024-bit RSA encryption in the OpenSSL cryptography library, although the hardware-focused attack is difficult to carry out and involves disrupting power supplies.
The Jericho Forum has taken the wraps off a self-assessment tool designed to evaluate the effectiveness of IT security products.
The steady stream of vulnerabilities discovered in Internet Explorer has continued with the revelation that a zero-day issue with IE 6.x and 7.0 allows a trojan that can steal personal and sensitive data to sneak on to a user's PC.
Research just published claims to show that more than half of internet users do not trust privacy policies posted on websites, and that just 28.5% respond positively when asked: "do you believe that online sites will actually honour privacy policies they have posted?"
A former worker for the Transportation Security Administration was indicted by a federal grand jury in Denver last week, on charges of trying to damage a protected computer. According to the District of Colorado attorney's office, Douglas James Duchak tried to corrupt a TSA database in the Agency's...