> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and updates. Ivanti has patched two zero-day vulnerabilities (CVE-2026-111357 and CVE-2026-118527) exploited in attacks on its Connect Secure VPN, underscoring ongoing risks in remote access technologies. A new Windows infostealer named VOLTA utilizes AI to prioritize stolen data based on the victim's financial value, indicating a troubling trend in malware sophistication. Additionally, the Aur0ra ransomware gang is employing AI agents to enhance their network infiltration and credential theft capabilities. In response to data scraping concerns, Reddit plans to restrict content access to logged-in users. Various Oracle updates address security flaws in Linux, including DNS attack vulnerabilities and mTLS connection issues, highlighting the importance of regular patching in mitigating risks.
|
// AI-powered summary generated at 08:00
The 2011 Lloydâs Risk Index has been published. While cybersecurity is only one aspect of overall business risk, it shows a surprising disparity in companiesâ attitude and preparedness in information security.
Russian media outlets and an election watchdog said they were the targets of cyberattacks during the recent Russian elections.
In its latest escapade dubbed Operation Robin Hood, Anonymous is vowing to steal credit cards and use them to donate money to charities and the â99%â of people who are poor.
A feature that comes standard with Windows 7 would have prevented the hack of RSA, which compromised the SecureID tokens used by some of the biggest names in the US defense industry, wrote Qualys researcher Rodrigo Branco.
The contractor who helped install the industrial control system for the Curran-Gardner Public Water District in Springfield, Illinois, said the water pump allegedly hacked by the Russians in fact just burned out.
Nearly a quarter of organizations around the world were victims of cybercrime in the last 12 months, according PricewaterhouseCooperâs 2011 Global Economic Crime Survey.
Hackers who want a job with the UK governmentâs GCHQ intelligence service need to crack a code to get an interview.
Global cybersecurity spending is predicted to total $60 billion this year and to grow 10% per year for the next three to five years.
A security flaw found in, but not necessarily limited to, HP printers can be exploited by hackers to take full control of printer functions, according to researchers at Columbia University.
Research published today by Trusteer claims to show cybercriminals have widened the services they provide as a one-stop-shop to third-party fraudsters.
The Payment Card Industry Data Security Standards (PCI DSS) are basic information security practices that can be applied to the cloud environment in the same way as traditional environments, said Tabatha Greiner, executive consultant for global PCI quality assurance with Verizon.
A data breach at South Korean online gamer Nexon has exposed personal information on 13 million subscribers.
The Information Commissionerâs Office (ICO) has imposed some of its first fines against public bodies after staff with North Somerset Council and Worcestershire County Council sent highly sensitive personal information to the wrong recipients.
Lyceum Capital, a private equity firm, has increased the total amount spent on IT industry investment this year to more than ÂŁ100 million with the acquisition of data security vendor Clearswift.
The FBI has revealed that four hackers were arrested in the Philippines last week in connection with an organized attack on the clients of telecoms giant AT&T in the US. Newswire reports suggest that the hacker crew was funded by terrorists linked to an Al Qaeda group that carried out the Bali b...
The director of security research with Solera Networks has called malware authors âmal-slackersâ for their âlazy repetitive malware scamsâ they have created for this US Thanksgiving.
Researchers at Context Information Security are playing down the level of risk to enterprises caused by the BEAST - Browser Exploit Against SSL/TLS â that was identified by researchers in late September.
Acuity has taken the wraps off a free PCI DSS compliance analysis application that can be downloaded from its web site. The software is billed as being able to identify, assess, manage and report on risks to cardholder data.
Research carried out by Kingston Technology claims to show that purchasing secure and encrypted USB sticks is no longer enough to defend data within a company environment.
The Information Security Forum (ISF) has published a new report on Federated Identity and Access Management that describes the methodology that IT security professionals need to adopt when implementing the technology into their systems.