> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
Research just released by Symantec claims to show that targeted attacks are on the rise, with email originating from China and RAR attachments being a major source of security problems.
A self-confessed computer hacker who pleaded guilty to some of the most serious card account hacking and ID frauds in US history, has been sentenced to 20 years in prison.
Convicted criminal mastermind Albert Gonzalez – the man behind the infamous hack of TJX's computer systems and more than 130 million payment cards – has been jailed for 20 years.
In an interesting analysis of the migration of local systems to the cloud, and the transition from desktop to laptops, netbooks and mobiles, Justin Foster, a software architect with Trend Micro, says that an unexpected transformation is taking place at the heart of server workloads and mobile device...
Protests against the UK's Digital Economy Bill are increasing, with organised protests taking place in London, Manchester and Sheffield, Infosecurity can report.
California's Symantec has taken the wraps off Web Security Monitoring (WSM), a new service for companies to check on their websites and ensure they are not being hacked, or perhaps worse, infecting their internet users.
The Conservative Party may well be an odds-on bet to win the general election later in the spring, but their reputation on the IT front took a battering this weekend after a website designed to highlight the Labour party's links to the Unite trade union seriously backfired.
eSoft has taken the wraps off a major update to its secure web filtering service, Sitefilter 3.0, which is used as a 'white label' facility by a number of third-party organizations.
Hard on the heels of its linkup with the WiFi Alliance last week, the ZigBee Alliance has announced plans to dramatically increase its presence in Europe, with the intention of meeting the European Union's 'smart grid' country programmes.
It with regret that Infosecurity has to report the unexpected death of Andrew Strong, global information security and compliance director with Unilever.
A security expert at Sophos has unveiled fake antivirus software targeting the new Windows 7 operating system.
Google has taken the wraps off an automatic web application security scanner called Skipfish, which it says will work on a number of existing web applications and check them for their levels of security.
In an effort to fix what they called a “badly broken” immigration system in the US, two senators have proposed the use of biometric Social Security cards for all workers.
Google has launched a security tool called skipfish, designed to help web developers scan their applications for vulnerabilities.
Network Box USA has announced a change in the way that it sells unified threat management appliances. It is switching to a managed service model, and is no longer charging for its hardware.
A study just published claims to show that, although 78% of children knowing that hacking it is wrong, one in four of them have tried hacking into other people's Facebook accounts.
Facebook is to set up a non-profit foundation to promote and develop the online privacy movement under a legal settlement reached this week.
You've heard about Apple potentially bricking iPhones, but that's small potatoes, compared to remotely disabling whole fleets of cars using centrally controlled computer systems. That's just what a 20-year-old employee for a Texas auto dealership is being accused of doing after he was laid off last...
ISO has published two new documents outlining principles and guidelines for secure archiving of electronic medical record data.
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.