> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
The price of online cybercrime has reduced so that criminals can rent bots by the hour. VeriSign's iDefense research operation says the cost is just $8.94 an hour.
Eset has announced the acquisition of Comdom Software, a fellow Slovakian software company noted for its anti-spam technology - financial details of the transaction have not been revealed.
Join this afternoon's Infosecurity Magazine webinar, and listen to industry experts discuss how moving email archiving to the cloud will effect your organisation.
The GSM Association's security group (GSMA-SG) has announced it is working with the Messaging Anti-Abuse Working Group (MAAWG) to host a three-day event in Barcelona in the second week of June. The three-day event seeks to allow members to discuss and share information on internet bots, spam and mal...
Gridsure, a UK-based firm that has developed a pictorial alternative to PIN and passphrase authentication systems, has signed a key banking deal in France.
Texas-based PlainsCapital Bank has reached a settlement agreement with one of its former customers, Hillary Machinery, which had more than $800 000 stolen from its corporate account by cyber criminals.
Oracle has announced it has reached an agreement to acquire database security firm Secerno.
Two pilot programs from Microsoft have been established in an effort to share pre-update information and aid in protecting critical infrastructure.
Security software group Symantec is to acquire VeriSign's identity and authentication business in a $1.28bn (ÂŁ89.1m) cash deal.
Fake anti-virus applications have been around for a few years now, but there are signs that hackers are deploying the scareware apps more and more and, according to Rik Ferguson, Trend Micro's solutions architect, the economics of fear are what drives this type of malware
Microsoft has issued a security advisory for a canonical display driver (cdd.dll) vulnerability affecting Windows 7 and Windows Server 2008 R2.
A former night-shift security guard pleaded guilty to two counts of transmitting malicious code for his role in hacking into computers at a Dallas area medical facility.
Microsoft is to pay $200m in settlement of a patent infringement case brought by VirnetX.
PandaLabs has warned internet users to be aware of a new type of phishing attack, following its investigation of a clone of the Navy Federal company's website, which is being used by criminals to harvest user credentials.
Around 30 000 new malicious and potentially undesirable programmes appear every day, according to security researchers at Kaspersky Lab.
Microsoft is to pay $200m in settlement of a patent infringement case brought by VirnetX.
Google has admitted that it mistakenly collected data sent over WiFi networks using its Street View cars gathering images for Google's controversial Street View service.
Reports are coming in that Facebook has identified the self-proclaimed hacker who was offering to sell batches of 1000 Facebook accounts – up to 1.5 million in total – and it appears that the Russian hacker was wildly overstating the account numbers.
Reports are coming in that Facebook has identified the self-proclaimed hacker who was offering to sell batches of 1000 Facebook accounts - up to 1.5 million in total - and it appears that the Russian hacker was wildly overstating the account numbers.
Facebook is once again in the news, as large numbers of users are being hit by a prank video posted to their Facebook walls.