> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.
DVD rental company Netflix has quietly cancelled a sequel to its Netflix Prize, a contest to enhance its movie recommendation technology using anonymous user data.
After several months of quietly hiring staff in the European IT security industry, Sunbelt Software has opened a new sales and research centre in Marlow.
The St. Louis Metropolitan Police Department is investigating a cyber attack that may have compromised the information of 24 people.
Researchers claim to have broken 1024-bit RSA encryption in the OpenSSL cryptography library, although the hardware-focused attack is difficult to carry out and involves disrupting power supplies.
The Jericho Forum has taken the wraps off a self-assessment tool designed to evaluate the effectiveness of IT security products.
The steady stream of vulnerabilities discovered in Internet Explorer has continued with the revelation that a zero-day issue with IE 6.x and 7.0 allows a trojan that can steal personal and sensitive data to sneak on to a user's PC.
Research just published claims to show that more than half of internet users do not trust privacy policies posted on websites, and that just 28.5% respond positively when asked: "do you believe that online sites will actually honour privacy policies they have posted?"
A former worker for the Transportation Security Administration was indicted by a federal grand jury in Denver last week, on charges of trying to damage a protected computer. According to the District of Colorado attorney's office, Douglas James Duchak tried to corrupt a TSA database in the Agency's...
The US plays host to the largest number of malicious web servers, according to a study released by anti-malware company AVG.
Health insurer Aetna has succeeded in having a class-action lawsuit over an alleged security breach dismissed.
If you're a follower of government cybersecurity matters you may have heard that the UK government's Cyber Security Operations Centre (CSOC) was due to open about now.
HSBC's Swiss banking operation – operating in an industry that is reknowned for its secrecy – has been rocked by revelations that details on as many as 24 000 of its wealthiest clients have been leaked.
The latest monthly spam report shows that, regardless of the world economy, there is one item that is particularly hot this winter: Russian mail-order brides. This is according to newly released figures from McAfee.
Smartphones could very easily become spy phones, with hackers able to eavesdrop on your conversations, researchers at Rutgers University in the US have warned.
IdentityFinder, the identity theft prevention company, are set to offer protection for social networking sites later this year.
Kroll Associates – the IT-enabled detective and investigations firm acquired by insurance giant Marsh & McLennan in 2004 for more than $1.9bn – is now up for sale, according to newspaper reports.
CIFAS, the UK's fraud prevention service, has reported a surge of almost a third in identify theft fraud during 2009, something that it says points to collusion between criminal gangs and staff working inside financial services companies.
A husband-and-wife team from Coral Gables has been indicted for the second time in a year for the theft and sale of privacy data. Authorities claim that in both cases, the couple received payments from personal injury lawyers in exchange for patients’ personal privacy data from a local ambulance com...
In further proof that the hospitality industry is becoming a prime target for hackers, The Westin Bonaventure Hotel and Suites has admitted a likely data security breach.