> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape reveals significant threats across various sectors. Capcom confirmed a data breach exposing 11.7 million user accounts, emphasizing the risks associated with gaming platforms. In a concerning trend, an attacker compromised Microsoft 365 accounts at 79 organizations without needing passwords, utilizing replayed sign-in sessions and hidden inbox rules. Vulnerabilities in PHP continue to be exploited, with millions of attack attempts related to PHP2Shell and newly discovered RCE flaws prompting urgent patching. Additionally, Russian-linked hackers have launched destructive attacks in Ukraine, while compromised TLS certificates from eMudhra Limited highlight the ongoing risks in digital trust infrastructure. The rise of AI in cybersecurity is also notable, with AI tools being used both defensively and as vectors for new attacks.
|
// AI-powered summary generated at 12:01
An identity thief who used victims' credentials to register credit cards fraudulently was sentenced to more than nine years in prison wihout parole late last week.
In its year-end report on the state of IT security, Computer Associates (CA) has noted that fake security software (fakeware), poisoned search engine results and social networking sites such as Bebo, Facebook and Myspace, were the major information security threats of 2009.
Many small businesses in the UK are not ready for the current snow fall, according to remote access provider LogMeIn of Massachusetts, USA.
A hacker group called ‘Iranian Cyber Army’ hacked Twitter for an hour early on 18 December, redirecting users to a website containing a green flag and Arabic writing.
A study from IDC Research shows that virtualised security appliances (VSAs) are becoming more and more popular amongst a growing number of companies.
Adobe has announced its latest zero-day security vulnerability in what has become a litany of such flaws this year - and this one won't be patched until halfway through January.
The US military is reported to be in quiet uproar after it emerged that Iraqi terrorists have hacked and monitored the video feeds from Predators, pilotless aircraft used for unmanned surveillance.
AppGate and Signify have announced they are able to offer clients unified secure access to protected information with strong, cloud-based, two-factor authentication.
The Royal Marsden NHS Foundation Trust, whose hospital was one of the first to develop cancer treatments back in the 1850s, is using secure USB sticks as part of a managed security solution to protect patient records.
The zero-day malware exploit against Adobe Acrobat and Reader reported earlier this week appears to have escalated, with Webroot Software noting that the payload from the exploit is generating a cluster of files designed to look like Windows system files which have been digitally signed with Microso...
The number of computers infected by botnet malware has almost quadrupled each year since 2004, according to a report to be released by Project Honey Pot next week.
One year after the McColo shutdown, spam volumes have not only recovered, but have grown beyond what they were before the rogue ISP was taken offline.
Just when the UK banks have started issuing two-factor authentication devices to a growing number of account holders, a report from the Gartner group claims to show that fraudsters have started to raid user accounts by beating the same technology.
Data security specialist Imperva has issued a warning after discovering a potentially serious SQL injection flaw with Rockyou.com, the social networking application development web portal.
Koobface - the long-running worm which first appeared 12 months ago - is being customised by hackers to crack security systems on website hosting services, and so allow it to auto-create its own web pages.
The UK Ministry of Defence says one of its encrypted laptops was stolen from its headquarters in Whitehall, central London in November – along with the laptop’s encryption key.
Microsoft’s last Patch Tuesday of the year saw the release of fixes for five flaws in its Internet Explorer browser, including a critical zero-day security vulnerability that was first publicly disclosed three weeks ago.
The hacker accused of helping to perpetrate the largest credit card theft in US history has agreed to plead guilty as part of a plea bargaining deal with federal prosecutors.
The House of Lords has heard evidence from a number of high-ranking IT experts about the risk of cyberattacks to the IT and communications infrastructure of the UK, and what might happen if a natural disaster interrupts the internet in a major way.
Reports are coming in of a new variant of the Koobface worm doing the rounds of PCs connected to the internet. This latest variation of the long-running criminal-driven malware uses a Christmas greeting to spread infections via the Facebook social networking portal.