> TODAY'S SUMMARY (150 articles)
Today’s cybersecurity news highlights significant vulnerabilities and trends. Microsoft’s October 2026 Patch Tuesday addressed a record 1,411 flaws, including three zero-day vulnerabilities, emphasizing the critical need for timely updates. Ivanti Connect Secure is under scrutiny for zero-day vulnerabilities that allow attackers to gain root access, with the U.S. CISA listing it as a known exploited vulnerability. Meanwhile, small AI models are raising alarms for their potential to self-replicate across IoT devices, posing new security risks. In retail, Ahold Delhaize is investigating a cyberattack that forced the company to disconnect systems, while recent attacks have also disrupted refrigeration systems in French supermarkets, leading to significant food waste. Additionally, vulnerabilities in Docker Hub and GitLab highlight ongoing risks in software supply chains, underscoring the importance of robust security measures across platforms.
|
// AI-powered summary generated at 20:00
Anti-malware vendor Kaspersky's site was hacked over the weekend, using an SQL injection attack. While admitting that the site was vulnerable, Kaspersky is denying that the vulnerabiity was critical. The hacker nevertheless listed what he said was the full set of tables from the firm's MySQL databas...
On Saturday, Google users were warned that all their search results were potentially harmful, due a widespread result of human error.
The annual report from IBM's X-Force security operation shows what many IT managers have suspected for some time, namely that Web application vulnerabilities represent the major risk for most organisations.
On Saturday, Google users were warned that all their search results were potentially harmful, due to a widespread result of human error.
ISACA, the Information Systems Audit and Control Association, has developed a new business model for IT security.
If you've had a high company phone bill recently, spare a thought for Martin & Hillyer, a law firm in Burlington, Ontario.
Overclockers.co.uk (OCUK), an online computer hardware reseller firm, have announced they are placing a bounty of ÂŁ10 000 on the heads of hackers behind a Distributed Denial of Service (DDoS) attack on their web site earlier in the month.
Here's a lesson in IT contingency planning, courtesy of Deutsche Bahn, the German railway network company, whose IT systems - including station indicator boards, electronic ticketing, self-service counter tickets and Internet pages - all went off line on January 14 due to single UPS failing.
'NASA hacker' Gary McKinnon has won permission from the High Court to apply for a judicial review against his extradition to the United States.
The UK government’s Infosec Training Paths and Competencies (ITPC) scheme is to transfer to the Institute of Information Security Professionals (IISP) with effect from 1 April 2009.
According to his lawyer, Karen Todner, Gary McKinnon, who may be facing extradition after confessing to hacking into US military computers, was told yesterday that the UK High Court would delay his hearing until the director for public prosecutions had considered the case following McKinnon's diagno...
Approximately one quarter of stalking or harassment cases in the US include an element of cyberstalking, according to a report from the Bureau of Justice statistics this week.
The Electronic Frontier Foundation and the American Civil Liberties Union of Northern California are suing the FBI over computer searches conducted at two activist organizations' offices.
Two new botnets have emerged in the past few weeks, and at least one shows signs of being an upgrade to a previous botnet that wreaked havoc in the wild.