> TODAY'S SUMMARY (12 articles)
Today's cybersecurity news highlights significant threats and vulnerabilities. Alpine Linux faced an attempted remote code execution (RCE) attack, prompting a rebuild of its GitLab server. Android devices are under threat from a new "SMS of Death" vulnerability, where a hidden SMS can crash call services, including emergency calls. A critical CVSS 10.0 flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients without private keys. Additionally, hackers stole around $2.7 million from Polymarket traders through a hijacked script. The FBI has linked North Korean group TraderTraitor to the record $6.43 billion Binance crypto heist, underscoring ongoing concerns around state-sponsored cybercrime.
|
// AI-powered summary generated at 16:00
In a joint exercise between between multiple law enforcement agencies, 36 websites associated with an e-commerce platform known as an automated vending cart (AVC) used to sell stolen credit cards were taken down on Wednesday.
A researcher has uncovered a backdoor in RuggedCom software used to control traffic and railroad systems that could enable a remote attacker to take control of the systems.
A hacker has posted source code for VMware’s ESX virtual machine on the internet, the company has confirmed.
Christopher Graham, the UK Information Commissioner, talks about his role as an information regulator and facilitator at Infosecurity Europe in London
A disturbing one in five Mac computers are infected by some form of malware, according to research by IT security firm Sophos.
The three companies represented on the keynote panel (G4S Secure Solutions, Steria UK, and Skipton Building Society) are very different; and their CISOs have very different views on the functioning of risk management within infosec.
The US Department of Health and Human Services, the Health Information Trust Alliance (HITRUST), and 14 healthcare organizations have set up the first Cybersecurity Incident Response and Coordination Center for the healthcare industry
Symantec has identified a social engineering scam that attempts to get users to download malware from third-party Android sites by passing itself off as part of pop icon Björk’s popular Biophilia app.
I am not a hacker, says Zarefarid. I did this to warn Iranian card holders that their accounts are in danger.
The Flashback trojan, which infected more Macs than any other malware in history, used hacked WordPress sites to get onto machines, according to Kaspersky Lab researcher Vicente Diaz.
The South Carolina Department of Health and Human Services announced this week that an employee stole personal data on 228,000 Medicaid recipients.
“The EU-US Passenger Name Record (PNR) agreement was adopted with 409 votes in favour, 226 against and 33 abstentions,” announced the EU yesterday. Opponents included “rapporteur Sophie in'T Veld, who withdrew her name from the report.”
The British Standards Institution (BSI) has recently updated its standards for information security auditing, BSI officials told Infosecurity.
The UK government's plans to allow security and police services to spy on e-mails, phone calls and internet browsing habits are dangerous, according to World Wide Web inventor, Sir Tim Berners-Lee.
Trusteer has discovered spyware being sold in underground forums for $280. It targets hospitality PoS applications.
Google is warning around 20,000 webmasters that their sites may be compromised and are carrying out “weird redirects” to malicious sites.
New statistics show that while many companies appear to understand the business threat from BYOD, many others are taking no precautions whatsoever.
In a move designed to offer genuine hands-on security experience to EMEA’s different security initiatives, professional body (ISC)² has launched a new Advisory Board for Europe, the Middle East and Africa (EAB).
Spammers have their sites on Verizon Wireless customers after targeting those of AT&T Wireless earlier this month.
Darkmegi, malware that uses a kernel rootkit component to infect computers, has begun exploiting a flaw in Java to conduct drive-by attacks, according to McAfee Labs.