> TODAY'S SUMMARY (14 articles)
Today's cyber news highlights several significant threats and trends. A coordinated operation has targeted phishing kits, leading to domain seizures and legal action. Cybercriminals are increasingly attacking physical systems, emphasizing the need for enhanced security in building management. The MALFEX campaign has introduced a malicious npm package, "imgdecode," that contains a shellcode loader, further demonstrating the risks in software supply chains. Additionally, suspicious notifications have been reported on platforms like Leboncoin and Vinted, with links to malicious casinos. The U.S. CISA has added multiple vulnerabilities, including those related to Fortinet and BeyondTrust, to its known exploited catalog. Finally, AI agents are reportedly accessing sensitive data in Indian organizations, raising concerns about the use of offensive AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Google is buying its way into the infosecurity market, through purchasing security service provider Postini for $625 million (ÂŁ310m, EUR458m) in cash, it said on 9 July.
This year, the Victory Challenge team introduced security into their game plan as they challenged the Swiss defender Alinghi, in the 32nd America’s Cup.
Eighty per cent of infected websites have been compromised by a third-party hacker, according to the latest threat statistics from Sophos.
Lloyds TSB has purchased pattern-recognition software from US vendor Actimize for detecting employee fraud within its retail banking operation. Use of such software is already common in financial services for spotting fraud in external transactions, such as credit card spending.
One gang is responsible for more than half of all attempted phishing for the likes of online banking log-in details, and has found ways to extend the lives of its web-sites, according to researchers at Cambridge University.