> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Northflank has experienced a security breach, prompting customers to rotate their API keys due to unauthorized access. A new Android exploit, the "SMS of Death," has surfaced, allowing attackers to remotely crash unpatched devices. Chainalysis disclosed a breach involving customer data exposure, while a critical vulnerability in Drupal Commerce is being actively exploited. The number of DDoS attacks has surged, with Cloudflare reporting an increase of 38% in Q3. Meanwhile, malicious extensions and AI-driven infostealers like VOLTA are emerging as advanced threats, leveraging AI for victim profiling and data theft.
|
// AI-powered summary generated at 20:00
Reports are coming in that a cybercriminal gang - with members who were involved in the Storm and Waledac worms - have raked in more than $150 million promoting unlicensed online pharmacies between May 2007 and June 2010.
The Internet Systems Consortium has published an advisory and an update for the Bind domain name system software versions 9.7.1 to 9.7.2-P3.
The latest 'victim' of USB stick loss, Cambridgeshire County Council, has been given an electronic dressing down by the Information Commisoners Office for what the regulator calls a clear breach of the Data Protection Act.
Exxon Mobil, Royal Dutch Shell and BP were among the oil companies targeted by hackers working through internet servers in China, say US reports.
Melih Abdulhayoglu, founder of Comodo, is never afraid to make some bold claims or call out the big boys of the anti-virus industry. Once again, the company’s chief executive did not fail to disappoint when he sat down with Infosecurity at last week’s RSA Conference in San Francisco.
The Libyan government could pull the plug on the country's internet as protests sweep the country.
The Libyan government could pull the plug on the country's internet as protests sweep the country.
The self-styled Iranian Cyber Army was able to hack into the US government-funded Voice of America website and transform the home page into a pro-Iranian banner that instructed the US government to “stop interfering with Islamic countries.”
The UK Identity and Passport Service (IPS) violated the Data Protection Act when it lost the passport renewal applications of 21 UK citizens, according to the Information Commissioner’s Office (ICO).
The Federal Energy Regulatory Commission (FERC) approved flawed cybersecurity standards for the US national power grid and failed to adequately monitor their implementation, according to an audit by the Department of Energy’s Office of the Inspector General (OIG).
Reports that President Obama is formulating plans to develop an internet 'kill switch', following infrastructure issues raised during the aftermath of the Egypt internet shutdown, should be viewed as a red flag to IT security professionals.
It seems that Russian police are working steadily to crush the rising tide of so-called pharma spam campaigns, with one security researcher having heard about a raid on the hackers behind the Rx-Promotions scheme.
A German IT security vendor has discovered a version of Zeus that has been signed with its own digital certificate – a move that could fool some corporates into installing the malware thinking it is a legitimate piece of code.
Credant Technologies has started testing its data encryption technology in the cloud with a select number of beta test clients, promising other cloud security offerings in the near future.
A security researcher has detailed how a flaw has been discovered and exploited on Rapidshare, the world's largest file-sharing service.
Oracle is fixing 21 flaws in its Java SE and Java for Business products in its February critical patch update issued this week.
Research just published claims to show that a failure to invest in secure software delivery is placing businesses at risk
Citicus, a corporate risk management and compliance specialist, has released a risk analysis/management app for the iOS range of Apple devices – the iPhone, iPad and iPod touch.
Integrity and honesty top the list of skills needed for the current and future federal cybersecurity workforce, according to an Office of Personnel Management (OPM) survey.
Research just published claims that end-of-life IT assets - especially portable devices like smartphones and laptops - pose a serious data security threat to many firms.