> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
Apple has come in for criticism on user forums for a new anti-fraud and anti-phishing warning system seen in its Safari Mobile web browser for the iPhone. Forum users report that the feature - seen in v3.1 of the iPhone's operating system - is less than consistent.
Gemalto, the French digital security firm, has acquired Trusted Logic, a provider of security software for mobile devices.
Fran Howarth, a principal analyst with Quocirca, the business and IT analysis research firm, has penned a report on strong authentication.
Research just released by Computerlinks, a UK distributor of IT security and internet technology products, shows that a sizeable number of businesses are failing to protect their most sensitive data.
Self-confessed hacker Gary McKinnon, who gained unauthorised access to multiple Pentagon computer systems, will learn this week whether an application for an appeal in his case will be heard by the Supreme Court, the new highest court in the UK.
Infosecurity Magazine’s Virtual Conference on Information Security 2009 is only a week away – sign up now!
Online scams related to holidays, global events, and popular news stories are common, but September 11 scammers really scraped the bottom of the moral barrel last week. Scareware scammers are using the eighth anniversary of the September 11 attacks to sell their fake anti-virus software to unsuspect...
An Edinburgh-based company has developed a relatively low-cost security tag that alerts users when a linked mobile phone moves more than 25 metres away. The Bluetooth-enabled keyring tab - known as Nio - comes with its own USB-rechargeable battery and sells for around £40.
Wigan Council has been been forced to sign an undertaking with the Information Commissioner's Office (ICO) following the theft of a laptop, which resulted into the personal data on around 43 000 children and teenagers being potentially open to abuse.
Security software budgets are expected to grow 4% in 2010, and security services budgets could grow almost 3%, according to Gartner.
After four years in gestation, the Home Gateway (HG) - an intelligent broadband/networking interface device designed to act as a hub for homes and small offices - is reaching fruition.
Barclays' investment arm has been fined £2.45m by the Financial Services Authority (FSA) for failing to report its investment details correctly.
Research by the 3rd Man, an electronic fraud and security specialist, has uncovered some interesting statistics about cardholder-not-present transactions, as well as fraudulent mail order plus online card purchases in the UK.
A ‘proof of concept’ virus called Win32/Induc.A is causing problems for programmers – including malware writers, according to this month’s ESET ThreatSense Report.
O2 - as well as BT subsidiary internet service provider Plusnet - have both responded to a potential XSS security flaw identified in the Thomson TG565 and TG565n wireless broadband routers they issue to their internet users.
Bloxx, a web filtering firm, has issued a warning that anonymous proxies - which are now being used by students to bypass campus blocks on inappropriate content - pose a serious information security threat to young people.
The problem of cross-site scripting (XSS) security flaws - which have affected hundreds of websites this year - has spread to broadband routers, as a security researcher claims that the Thomson wireless box III supplied by O2 leaves internet users "wide open" to the issue.
Reports that a North Carolina business has been left with a US$2500 phone bill after phone phreakers hacked its PBX via the firm's toll-free number shows the danger of failing to audit all aspects of a systems' software, said Fortify, the application vulnerability specialist.
With the recent scares about the swine flu, more and more businesses feel the need to plan for a pandemic, but are their security and IT up to the challenge?
Ealing Council's computer system was crippled by a virus after an infected memory stick was plugged into the IT resource. The council has been landed with a £500 000 bill to clean up the security mess that has resulted.