> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights significant threats, notably the FBI's attribution of the record $6.3 billion Binance crypto heist to North Korean hackers, known as TraderTraitor. This breach underscores the ongoing risk posed by state-sponsored cybercriminals in the cryptocurrency sector. Additionally, a new vulnerability in Android, dubbed "SMS of Death," allows attackers to crash call services through a hidden message, posing a severe risk to users. In other news, hackers exploited a critical flaw in Canonical's LXD, enabling unauthorized logins as trusted clients. Furthermore, malicious code on Polymarket's website led to the theft of approximately $2.7 million from traders, showcasing vulnerabilities in online platforms. Lastly, a sophisticated malware campaign targeting government systems in Asia has been identified, underscoring the evolving nature of cyber threats.
|
// AI-powered summary generated at 20:00
Are private Facebook messages from the years 2007–2009 showing up on people’s public Timelines? Users say yes, but Facebook says the rumors are false.
Adobe is planning to revoke an Adobe code signing certificate, after hackers broke into an internal server to compromise the digital certificate. This allows the attackers to create files that appear to be legitimately signed by the software maker, but in fact contain malware.
Taken from our recent US Summer Virtual Conference, Theresa examines the current threat landscape
Verizon Enterprise Solutions has become the newest member of the Lockheed Martin Cyber Security Alliance, a collaborative effort to address national cyber defense challenges – including the growing threat posed by cyber attacks against the US' critical IT infrastructure.
Sandwiched between its proposed new Data Protection Regulation earlier this year and the new cyber security strategy expected later comes the EU’s new cloud strategy document: ‘Unleashing the Potential of Cloud Computing in Europe.’
To paraphrase Winston Churchill, “If you put two security experts in a room, you get two opinions, unless one of them is a user, in which case you get three opinions."
Michigan healthcare providers will soon be implementing new biometric protections for identity access management to patient care records.
The usernames and passwords of 100,000 members of the Institute of Electrical and Electronics Engineers (IEEE) have been found unencrypted on a FTP server by Radu Dragusin, a Romanian researcher.
The VOHO campaign would appear to be a sophisticated and extensive APT-style attack targeting primarily political activists, the defense industrial base and education – especially in the Boston and Washington DC areas.
As Facebook shares continue their general downward trend, the social network giant is rocked by two new privacy concerns: a glitch that has started to expose old private messages; and the tie-up with advertising metrics company Datalogix.
The rise of mobile malware is becoming an industry meme, and no wonder: As mobility starts to permeate every aspect of consumer and business lives, malware vectors are increasing.
A new Islamist hacker collective has amassed to protest the “Innocence of Muslims” YouTube video, via attacks on several low-level Western websites. It promises continued action in the wake of the film.
Thanks to a lack of comprehensive content protection, Android developers are finding themselves at major risk for piracy, and it’s significantly impacting their business, according to a new survey from Protection Technology Research (PTR).
Costin Riau, a security expert with Kaspersky Lab, tried to log into his old hotmail account with his old hotmail password – all 36 characters. It failed, with an error message saying, “Microsoft account passwords can contain up to 16 characters.”
Digital rights groups have long claimed that the online terrorist threat is used by governments as a reason for imposing wide-ranging control of the internet. A newly leaked document from the EU Clean IT project seems to confirm such mission-creep.
The 9th U.S. Circuit Court of Appeals has ruled by 2-1 that Facebook’s class action settlement of $9.5 million over its defunct Beacon service must stand, concluding that the sum was “substantial in this case.”
When it comes to trends in security for 2012 so far, the landscape has seen a sharp increase in browser-related exploits, like recent ones for Internet Explorer and Java, along with renewed concerns around social media password security and continued disparity in mobile devices and corporate bring-y...
What stands out most from Imperva’s new analysis of DDoS attack methodologies, is that DDoS is easy, growing in use and probably more prevalent than commonly perceived.
As the new academic year begins, two UK regulatory bodies have issued new guidelines that raise the bar for school security: the ICO advises on data protection while Ofsted indicates it will include schools’ e-safety in future inspections.
The US National Institute of Standards and Technology (NIST) has released a final version of its risk assessment guidelines for determining the level of information security risks in IT infrastructure.