> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
Do-Not-Track (DNT) is the evolving standard that will provide internet users with greater control over their privacy on the internet. “Yahoo websites worldwide will comply with visitors’ Do-Not-Track preferences starting later this year,” said the company on Wednesday.
The discovery of the Mediyes trojan using a valid digital signature has raised concerns about the need for proper key management, noted John Grimm with Thales e-Security.
The US government has evidence that Chinese hackers were responsible for the breach of RSA last year that compromised the company’s “underlying software” and required the replacement of hundreds of SecurID tokens, a top national security official told Congress this week.
Chris Aragon, one of the leaders of the ID theft and fraud forum known as the Carders Market, has pled guilty to stealing thousands of personal identities and counterfeiting credit cards to buy high-end goods that were resold on eBay and craigslist.
The US Federal Trade Commission (FTC) has reached a settlement with the social gaming site RockYou over charges it failed to protect the privacy of its users, enabling hackers to access personal information on 32 million users in 2009.
Organized digital crime is growing – but we still know little about the structure of organized digital crime groups. A new report from BAE Detica Systems and the John Grieve Centre for Policing and Security at London Metropolitan University seeks to change this.
The Australian government has blocked China’s Huawei Technologies from participating in the country’s AUS$36 billion national broadband network (NBN) project because of cybersecurity concerns.
A Belarusian named Dmitry Naskovets has been sentenced to 33 months in federal prison for operating CallService.biz, an online site that helped over 2,000 identity thieves commit fraud, federal authorities announced on Friday.
The General Accounting Office (GAO) is warning that insecurity in the global IT supply chain is putting US national security agencies at risk.
The MilitarySingles.com website has apparently been hacked by LulzSec Reborn, exposing user information on 170,000 members.
In a major action against the banking trojan Zeus, Microsoft with FS-ISAC and NACHA and research from Kyrus Tech and F-Secure have succeeded in disrupting a number of the most harmful Zeus botnets in “in an unprecedented, proactive cross-industry action.”
The US government has issued new counterterrorism guidelines that allow for the retention of intelligence on US citizens for five years, rather than the current 180 days.
Managed health care consortium Kaiser Permanente has notified thousands of current and former employees that their personal information was found on an external hard drive purchased in a second-hand store in California.
PwC and Iron Mountain have joined together to develop a risk maturity index for European SMEs; and finds them generally lacking.
Encrypted searching should become available by default for all Firefox users within a few months – a big win for privacy.
On the same day that the Sunday Times reported Indian workers offering UK finance details for sale at as little as 0.02p, the Observer reported that IBM contractors in India will have access to the data of 43 million UK drivers held by the DVLA.
In an apparent effort to turn the public relations tables, China is claiming that most of the foreign cyberattacks against Chinese computers are coming from Japan, the US, and South Korea.
Two southern California men pled guilty this week to participating in a PIN-pad tampering scheme at 84 Michaels craft stores that resulted in the theft of 94,000 debit and credit card account numbers.
StubHub, an online ticket exchange, was having trouble with criminals using its open platform to verify credentials that had been stolen from other sources. The website turned to SilverTail for help, explained Robert Capps, senior manager of trust and safety at the company.
The average organizational and per capita cost of a data breach in the US declined in 2011 for the first time in the seven years that the 'US Cost of a Data Breach Study' has been compiled.