> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
Speaking at the Security for a Digital Britain conference in Nottingham last week, Lord Erroll warned the audience of the security pitfalls of a digital society such as data loss and privacy questions.
Cybercrime is both global and organised, Mike Humphrey at the Serious and Organised Crime Agency (SOCA), told the audience at the Security for a Digital Britain conference on 24 September in Nottingham.
The Muscat chapter of the Information Systems Audit, Control Association (ISACA) held an education seminar on information security earlier this month at the College of Banking and Financial Studies in Oman.
The increasing blurring of network perimeters has accelerated as a direct result of the introduction of cloud computing to the corporate IT mix, but can your IT security handle the challenge?
Takedowns, Tools, Threats, and Tsk, Tsk! We review the week's information security news.
DeviceLock, the endpoint security specialist, has announced that the Gazpromneft-Khantos branch of Gazprom Neft, the high-profile Russian oil company, has selected its software for endpoint security.
Popular websites have been made to serve up malware via malicious advertising delivered by advertising banner services.
MI5 has hired a batch of Asian teenage computer hackers to help fight cyberterrorism in China, Russia and Pakistan.
The New York Times has admitted it has been the victim of a complex scam, in which a group of hackers purchased ad space on the famous publisher's website, then posed as internet telephony company Vonage, to infect users with malware.
Websense Security Labs has found a spam operation targeting players of the old game favourite, Monopoly, via social networking methods.
Printer company Canon has unveiled a printer that can automatically protect the data in copied documents. The Canon ImageRunner Advance printer, targeted at medium to large enterprises, features Scan Lock, a system which superimposes a watermark on copied documents, coded as a series of microdots.
After beta testing the service amongst a select number of its users since the start of the year, Paypal has rolled out a text message security check system for its electronic cash and payment service.
Interpol, the international police agency, has announced that the EDAPS consortium has been chosen to design and produce the secure electronic passport.
Two experiments conducted at MIT are raising questions about the level of privacy among those who use modern tools such as mobile phones and social networks - and suggesting that there is even less of it than most of us already thought.
Yahoo has warned users of its Yahoo Mail service about a two-year-old security flaw that appears to allow hackers to gain access to their accounts via a back door.
Talk, Tools, Techniques, Trials, and Traps - get the lowdown on the week's security news in our weekly brief.
The Ministry of Justice (MoJ) has lost the personal information of more than 2 000 people in the past year, according to the department's annual financial accounts published last week.
US government officials are reported to be watching India with interest, where the government has taken the major national security step of recommending a ban on international internet telephony until a system to trace the calls is in place.
Eight months into its first year, the Obama administration could still try harder when it comes to electronic privacy and digital rights, according to a report card issued by an advocacy group.
An informative webinar - in which BigFix, Trend Micro and one of their joint customers in the healthcare sector looked at some of the problems in the mobile workforce and allied IT security sectors - was a great success this Thursday.