> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
TeleTrusT, the German IT security association, awarded the TeleTrusT Innovation Award 2009 to the Spanish Savings Banks Organisation (Confederación Española de Cajas de Ahorros, CECA) for its e-signing project at ISSE 2009 last week in The Hague.
Apple Computer has been criticised for failing to address a potentially major code flaw in copies of Snow Leopard, its new Mac operating system, which means users' main accounts can get wiped.
In a session titled ‘Enhancing payment security in 2010’, Robert O. Carr, Chairman and CEO or Heartland Payment Systems - the subject of potentially the world’s biggest data security breach earlier this year - declared that the model used by quality security assessors (QSA) is “broken”.
Identity and access management (IAM) investments should be increased rather than decreased due to the current economic climate, according to around three quarters of respondents to a survey presented at ISSE 2009 last week by KPMG IT Advisory and Everett in cooperation with eema and IIR.
Origin Storage will unveil a one terabyte (1000 gigabyte) version of its Data Locker, secure external hard drive unit, at the Storage Expo show, which opens at London Olympia on 14 October for a two-day run.
Research just released by Loughborough University and on365, the data centre management specialist, claims to show that data centre managers lack any real understanding of their IT infrastructure energy costs and demands they are placing on it.
Self-confessed UFO hacker Gary McKinnon has been denied the chance to appeal to the Supreme Court against his extradition to the US.
Police and FBI agents yesterday charged nearly 100 people in the US and Egypt as part of Operation Phish Phry, one the largest cyber fraud phishing cases to date.
Four stolen laptops belonging to Lancashire Care NHS Foundation Trust, which provides mental health services, have been traced and recovered. According to the NHS Trust, no confidential data was compromised due to remote wiping.
Comcast is piloting a service that will notify customers that have been infected with malware, the company said this week.
Smart cards can result in a 644% return on investment in an enterprise with 2000 employees, Philip Hoyer, senior architect at UK-based ActivIdentity, said at ISSE 2009 in The Hague.
Infosecurity is pleased to announce its first webinar on the topic of Web 2.0 branding and reputational risks, which will be held at 3pm (UK time) this Thursday.
ISC2, the not-for-profit security professionals organisation, has announced its school internet safety volunteer programme has reached 20,000 students worldwide, and has now been expanded to the US.
Symantec has taken the wraps off its first graduate recruitment and internship programme for the Europe, Middle East and Africa (EMEA) region.
PCI DSS compliance is fast becoming a hot topic in boardrooms and at Reading football club – one of the Championship's largest clubs – as Reading FC has successfully migrated to a virtualised IT infrastructure.
Deviousness, Defenses, and Disappointments - read all about the week's security news in our weekly brief.
Hard on the heels of widespread reports about smart energy meters and their grids being vulnerable to hacker attacks, HP has launched a security audit for smart grid services.
Researchers at the University of Utah have devised a way to visually monitor a room using cheap wireless sensors. The technique, known as ' variance-based radio tomography', effectively enables its users to see through walls, explain Jerry Wilson and Neal Patwari, authors of a paper on the subject.
Users of the US global positioning system (GPS) in Europe now have access to an enhanced-accuracy service provided by the European Union.
Vodafone has revealed it is developing a secure and encrypted data / password vault for smartphones. Known as Keeper Mobile, the encryption technology will be released by the mobile carrier's operations worldwide by the end of the year.