> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
New variants of Darkshell, a distributed denial of service (DDoS) botnet targeting Chinese websites, have been detected by McAfee Labs.
Baylor Law School sent out an email to the incoming class informing them of an extension to the deadline for “seat deposits” along with a spreadsheet containing GPAs and LSAT scores on all class members.
Swiss industrial conglomerate ABB does not plan to patch an arbitrary code execution vulnerability in components of itsWebWare Server application, used in various industrial systems, because it is a legacy product nearing the end of its lifecycle.
The UK faction of Anonymous has announced a campaign against the Home Office in protest against extradition arrangements with the US, and the European Arrest Warrant (EAW). It is timed for 9:00pm on Saturday.
In order to protect data from a disaster or cyberattack, organizations should develop a disaster recovery plan based on a cost-benefit analysis of the value of the data versus the cost of maintaining backup facilities, according to a report from Wisegate.
In an apparent about-turn over government plans to allow security and police services to spy on e-mails, phone calls and internet browsing habits, deputy prime minister Nick Clegg said the legislation will be published only as a draft.
Cybercriminals have launched a Blackhole-laden spam campaign against US Airways passengers, trying to convince them to click on a link to "view" their reservation, according to Kaspersky Lab.
The Internal Revenue Service (IRS) just can’t catch a break when it comes to its information security posture; the US Treasury’s auditors are joining the criticisms begun by the Government Accountability Office (GAO) about infosec shortcomings at the US tax collector.
Edward Pearson, aka G-Zero, has been jailed for 26 months at Southwark Crown Court for “making an article for use in fraud and two counts of possession of an article for use in fraud.”
Discussing the latest drive-by threat to Mac users that exploits an unpatched Java vulnerability known as CVE-2012-0507, Graham Cluley of Sophos blogs, “My advice is that if you have no real need for Java, remove it.”
Adobe has released a free tool that helps IT administrators classify suspicious files as malicious or benign using machine-learning algorithms.
A report issued this week by the American Civil Liberties Union (ACLU) claims that local law enforcement is engaged in pervasive warrantless tracking of cell phones.
US defense firm ManTech has acquired technology security firm HBGary, which was at the center of a controversy last year when it claimed to have infiltrated Anonymous and was then attacked by the hacktivist group.
Global Payments, a third-party payment card processor, has admitted that around 1.5 million credit card numbers may have been stolen in a massive data breach last month, up significantly from the original report of 50,000.
Computer storage devices containing personal information on 800,000 California residents were lost following a disaster recovery exercise held by IBM and Iron Mountain on behalf of the California Department of Child Support Services (DCSS).
In its latest Hacker Intelligence Initiative report, Imperva analyzes remote and local file inclusion (RFI/LFI) attacks as favored by LulzSec.
The EC Data Retention Directive is already in force in the UK as a Statutory Instrument – The Data Retention (EC Directive) Regulations 2009. A proposed new bill will now force ISPs and telecommunications providers to make this data available to law enforcement in real time.
Global Payments, an Atlanta-based credit and debit card processor for banks and merchants, has suffered a security breach that has exposed information on at least 50,000 cardholders, the Wall Street Journal reported.
ESET has reported on the latest version of the Blackhole exploit kit, noting that it has been updated to include a recent Java vulnerability.
Hotfile is being sued by Warner Bros (and others) – the MPAA – for copyright infringement; Hotfile is countersuing for bogus copyright infringement claims.