> TODAY'S SUMMARY (1 articles)
Today's cybersecurity updates highlight an increase in ransomware attacks, particularly targeting healthcare and educational institutions. Phishing campaigns continue to evolve, with attackers using sophisticated social engineering tactics to bypass traditional security measures. Additionally, vulnerabilities in popular software applications are being actively exploited, emphasizing the need for timely patch management. The rise of supply chain attacks remains a significant concern, as threat actors target third-party vendors to gain access to larger networks. Organizations are urged to enhance their incident response plans and user training to mitigate these growing threats.
|
// AI-powered summary generated at 04:00
The first sign of a problem was the simple message, this site is ‘down for maintenance’. This was later replaced by the current message, NVD ‘has experienced an issue with its web services and is currently not available.’ The reality is, NVD got hacked.
State-sponsored malware such as Stuxnet and Flame raised awareness of ICS/SCADA vulnerabilities, and the potential for serious infrastructure damage via them. New research presented today at Blackhat Europe discusses the findings of a honeynet study into ICS attacks.
Even though organizations are increasingly aware of the damage that can be done to their reputation and customer trust through the misuse or loss of sensitive data, a new report reveals that only 22% of businesses have implemented secure printing initiatives, indicating a low level of awareness of t...
Activists for Tibet and China’s Uyghur community are being targeted once again, this time with an Adobe PDF vulnerability using the MiniDuke malware.
Organizations citing cybersecurity costs as an impediment to implementing a layered defense should rethink their priorities: Denial of service (DDoS) and malware infection recovery costs range into the thousands of dollars – per day.
The danger comes from staff bringing both their personal devices and their personal preferences to work – whether that’s listening to the radio, watching the latest episode of their favorite soap during break periods, or browsing YouTube.
That information security is really an aspect of organizational risk management is well known in theory, but is now being mirrored in practice. New research demonstrates that CSOs are increasingly adopting a risk-based rather than tick-box approach to security.
Skype is running into a contretemps, as it were, with the French telecom authority over lawful intercept regulations, with some executives possibly facing criminal charges for non-compliance.
President Barack Obama is shining yet another light on the rising cybersecurity threat in the US, sitting down with more than a dozen CEOs inside the White House Situation Room to discuss how government and the private sector can work together to better protect the nation’s citizens and critical inf...
A range of political and celebrity targets have been made victims of a cyber-attack known as “doxxing”, by perpetrators using a Russian website.
The Reserve Bank of Australia has admitted that its been an ongoing target for hackers, although the nation's central bank says no data has been lost as a result of the attacks.
In what is believed to be an industry first, Tennessee-based footwear and sports apparel retail chain Genesco is suing Visa over a $13 million dollar fine imposed following a data breach in 2010.
A new vulnerability, CVE-2013-0108, has been discovered in Honeywell industrial control systems (ICS), continuing the growing trend of SCADA and building control issues.
After a fourth quarter of declining spam levels in 2012, junk emails actually almost doubled in February 2013.
Against a background of the EU likely to water down its privacy proposals, and Harvard university secretly searching the emails of 16 resident deans, two major universities have published two very different papers on privacy in the internet age.
Tripwire, a Portland Ore security and compliance company, has announced a definitive agreement to acquire nCircle, a San Francisco risk and security performance management company.
So says an article in the latest issue of New Scientist, commenting on a report published in the Proceedings of the Royal Society last week. The key, apparently, is China’s implementation of Source Address Validation Architecture (SAVA).
Dovetailing with the ever-escalating glut of Android-based mobile malware, it turns out that a black market for Android developer accounts has sprung up. Google Play accounts are apparently going for $100 a pop in the cyber-underground.
A $5 million class-action suit brought against networking site LinkedIn concerning a significant June 2012 data breach has been dismissed after a US District Court judge ruled the breach as “abstract” rather than resulting in actual harm.
This month’s Patch Tuesday will include seven security bulletins from Microsoft: four are critical and three are important; three require reboots, three may require a reboot, and one does not. Both businesses and consumers will likely be affected.