> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
New research from M86 Labs adds further insight on the MIDI exploit first highlighted by Trend Micro last week.
More than half of policy makers and global cybersecurity experts believe that an arms race is taking place in cyberspace, according to a new report by McAfee and the Security and Defence Agenda think tank.
The FBI likely employed its CIPAV spyware to eavesdrop on Kim Dotcom and other managers of MegaUpload, according to a report by CNET.
Trymedia’s ActiveStore web-based storefront application, which processes digital game purchases made by customers on its partners’ websites, was recently breached, exposing credit card numbers and other personal information of more than 12,000 customers
A talk at the Information Exploitation Conference at the Home Office’s Security and Policing Exhibition 2012 today addresses the disconnect between user and professional, and calls for a new standard that focuses on training and awareness.
As Microsoft seeks to wean users away from the aging and insecure Internet Explorer 6, companies with IE6 legacy applications are stuck – they can’t upgrade to a newer OS because IE6 is no longer supported; and they still need IE6.
The iPhone 5 is expected to hit the market sometime this year, but scammers are looking to give you one for "free" right now.
Andrey Sabelnikov, named in Microsoft court papers as controller of the Kelihos botnet, declares his innocence in a LiveJournal post.
Trend Micro researchers are warning that a recently patched flaw in Windows Media Player is being used by remote hackers to launch malware.
A new report from the Information Security Forum (ISF) proposes the evolution from simple data defense to cyber resilience.
New research from anti-malware company ESET shows how easy it is to tailor Carberp to attack new and different targets.
Mobile operator O2 has apologized for a technical problem that resulted in subscribers' phone numbers being included in header information sent to websites they visited.
European Justice Commissioner, Viviane Reding, has unveiled the new European data privacy framework that includes a new regulation and a new directive.
Hackers, possibly from abroad, attacked a Pacific Northwest railway company’s computer system, disrupting railway signals in December, according to the US Transportation Security Administration (TSA).
UK mobile operator O2 is investigating claims it is putting customer security at risk by sending their phone numbers as header information to websites they visit.
The National Institute of Standards and Technology (NIST) has issued its first set of guidelines for managing security and privacy issues in the public cloud.
More than half of organizations expect to increase their information security spending in 2012, some by 8% of more, according to a survey by the Enterprise Strategy Group (ESG).
Viruses infect executables. Worms are executables. So viruses can, and are, infecting worms. The result, claims anti-virus company BitDefender, is a new category of threat: Frankenmalware.
The Open Digital Policy Organization reports that the Norwegian Data Inspectorate has effectively declared use of Google Apps in Norway to be illegal.
Two New York power companies, which have 1.8 million customers, have disclosed that customers' personal information, including social security numbers, dates of birth, and financial account data, may have been compromised by third-party unauthorized access.