> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Northflank has experienced a security breach, prompting customers to rotate their API keys due to unauthorized access. A new Android exploit, the "SMS of Death," has surfaced, allowing attackers to remotely crash unpatched devices. Chainalysis disclosed a breach involving customer data exposure, while a critical vulnerability in Drupal Commerce is being actively exploited. The number of DDoS attacks has surged, with Cloudflare reporting an increase of 38% in Q3. Meanwhile, malicious extensions and AI-driven infostealers like VOLTA are emerging as advanced threats, leveraging AI for victim profiling and data theft.
|
// AI-powered summary generated at 20:00
Vigil Software, an audit, security and regulatory compliance specialist, has warned that the planned devolution of administration in the National Health Service down to GP level could have serious repercussions for IT security.
The ITU, the International Telecommunications Union, has unveiled a new set of standards designed to support improved monitoring of electricity grids and networks.
The first two days of the Pwn2Own cracking contest, held at CanSecWest in Vancouver, were a success with Google's Chrome and Mozilla's Firefox surviving the best efforts of the cracking contestests.
The organisers of Black Hat Europe 2011, which opens for a four-day run next Tuesday in Barcelona, have announced that two security experts will be making a presentation on the recent WikiLeaks-inspired DDoS attacks.
The UK's first national Cyber Security Challenge has succeeded in its quest to find hidden talent, with a postman from Wakefield taking top honours in the competition.
Microsoft has reportedly been hit by a scam involving its 'free Microsoft points' scheme, which offers free points on the software giant's Xbox 360 promotions programme. Hackers appear to have developed software to generate vast amounts of points by repeatedly refreshing the points allocation page u...
New Jersey state agencies were about to auction off hundreds of computers containing sensitive information, including residents' social security numbers and medical records, when state auditors discovered them in a warehouse on their way to public auction.
The US Naval Academy announced this week the addition of several new educational offerings that seek to bolster midshipmen knowledge of cybersecurity related issues.
Most single-layer authentication methods are broken and more are being broken all the time, says Gartner analyst Avivah Litan.
IT security and business continuity managers now have another reason to get an iPad or iPhone, as the Environment Agency has released an app to warn businesses and members of the public of the risk of flooding in their area. A version of the free app is also in the works for Google Android and Black...
The Cord Blood Registry (CBR), the nation's largest stem cell bank, admitted that it lost unsecured personal data on 300,000 cord bank clients, a breach that could cost it millions to address.
Research just released by Retail Decisions suggests that cardholder-not-present fraud fell to £239 million last year, a reduction of 10% on the £266 million reported in 2009.
ENISA, the EU's cyber security agency, has published a study on the botnet threat and how to address it.
Research released today claims to show that 49% of businesses in the UK do not have the facilities to remote wipe their employee's mobile devices.
Panda Security is warning internet users to use extreme caution if they see an email advertising job opportunities in the Middle East
Microsoft appears to be counting on the luck of the Irish (Is Bill Gates Irish?) in not patching a zero-day vulnerability in its Internet Explorer (IE) browser for this month’s Patch Tuesday.
The non-profit IT security trade group (ISC)2 is teaming up with M.Tech to deliver information security education classes in Australia, New Zealand, and the Philippines.
Amazon has revealed it will launch its own app store, offering apps to users of Android and other smartphone platforms. The publishing giant also says it will be security vetting all apps before releasing them to users.
The fifth Pwn2Own cracking contest, due to take place later this week at the CanSecWest event in Vancouver, will see code cracker George Hotz - aka Geohot -, the infamous iPhone/PS3 technology cracker, publicly cracking the Windows Phone 7 smartphone platform.
About one third of European smartphone users store credentials to access personal and corporate e-mail on their mobiles, a survey has revealed.