> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
The New Mexico Human Services Department informed users of its Salud! Medicaid plan that an unencrypted laptop containing personal health information was stolen back in March.
Earlier this week a San Diego jury convicted a Chinese national for attempting to smuggle communications equipment out of the country, including encryption devices used by the US military and NATO.
Cybercriminals are using Google Groups to distribute rogue anti-virus software and other malware, according to researchers at security firm eSoft.
Earlier this month the co-founders of anti-virus software vendor Sophos agreed to sell a majority stake in the company to private equity group Apax Partners in a deal worth $300 million.
Mikko Hypponen, F-Secure's chief research officer, says he applauds the actions of law enforcement offices around the world in bring increasing volumes of cybercrminals to justice in the first four months of 2010.
German enterprise software maker SAP has agreed to acquire US database and mobility software producer Sybase for $5.8bn.
Microsoft issued two security bulletins on Tuesday for what the company called “critical” patches to the Windows OS, Office suite, and Visual Basic.
A Florida couple accused of selling off patient records from a Miami-area medical center had their plea agreements rejected by a Federal court judge yesterday.
The Maryland Attorney General announced the state has settled a case against payment card processor Mid Atlantic Processing, which allegedly improperly disposed of 77 boxes containing client data.
Reports are coming in that large numbers of Twitter account holders have had their online accounts compromised, with the accounts apparently generating messages advertising a website that claims to help users attract more followers.
A newly released survey from (ISC)² shows that federal CISOs are avoiding cloud computing applications due to concerns about replicating IT security policy in the cloud.
Research just released claims to show that China, the US and the Russian Federation contributed 49% of all web-based threats reported in April 2010.
Fresh from its security problems of earlier in the week when members' chat sessions were visible to third-party users, Facebook has come under fire for allegedly installing applications on users' Facebook areas by stealth.
Fresh from releasing a range of encrypted drive kits at last week's Infosecurity Europe show, Origin Storage says that the steady stream of advances in brute force decryption techniques – which started when Russia's Elcomsoft released the first versions of its Password Recovery suite of 'utilities'...
Security professionals lack confidence that political parties will do anything to improve cyber security, according to a survey by security firm Proofpoint.
Our Lady of Peace psychiatric hospital in Louisville has notified the public of the loss of a flash drive containing the personal information of 24 600 patients.
A researcher originally blocked from giving a talk about security in ATMs will go ahead and make his presentation at the Black Hat USA conference this year.
VeriSign has released a report that seeks to assist online businesses and other enterprises in protecting themselves against distributed denial-of-service (DDoS) attacks.
A USB drive that contained the medical records of patients and personal information on NHS staff was apparently lost by a member of staff of a secure medical unit in Scotland, and has turned up in a supermarket car park.
A North Carolina man has been accused of trying to hack into an automated teller machine and change its password, according to a complaint filed by the FBI.