> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Reddit plans to restrict access to logged-in users to combat content scraping, while blockchain firm Chainalysis reported a data breach involving customer data exposure due to advanced attack techniques. The emergence of the VOLTA infostealer malware, which employs AI to profile and prioritize victims for data theft, underscores the increasing sophistication of cyber threats. Additionally, critical vulnerabilities in Drupal Commerce and Ivanti Connect Secure are being actively exploited by attackers, raising alarms for online retailers and organizations using these platforms. Cloudflare reported a staggering rise in DDoS attacks, with 18.2 million incidents recorded in Q3, marking a 38% increase. Finally, users are warned about potential risks from malicious ChatGPT links that can execute code in their sessions, compromising private conversations.
|
// AI-powered summary generated at 16:00
The Federal Trade Commission is requiring three credit report resellers to strengthen their data security procedures and submit independent audits every other year for 20 years as part of a settlement with the agency.
Next week's patch Tuesday will, says Lumension, lead to 900 million reboots of Windows machines around the world. Sadly, whilst this sounds a rather large power-draining volume of unnecessary PC actions, the reality is that it's not that abnormal.
It looks as though Adobe's new Reader X incorporates a number of security features that block exploits that cybercriminals have tapped in previous Reader viewer applications. Sophos is reporting that its research team has tested the viewer and found that it locks down malicious PDF spam in is tracks...
The N-DEx search engine, which the FBI revealed back in 2008 as a means for US law enforcement agencies to carry out Google-style searches on multi-agency databases, is about to go live in the US.
Reports are coming in that the Egyptian government is using elements of the emergency national broadcast network to pipe tens of thousands of pro-Mubarak text messages on the network of Vodafone Egypt.
The National Institute of Standards and Technology (NIST) has issued the final version of its recommendations for securely configuring and using full virtualization technologies, which allow multiple operating systems to run on a single platform.
A white paper just published by Corsaire claims to show that multiple authenticators - such as PIN codes with security questions – are still not enough to protect private data.
Trusteer says that its research into the Zeus malware and botnet command and control (C&C) servers that control the swarms of infected internet users shows Russian and US top level domains are now the main home of C&C infestations.
New name, and new vision – that was the crux of the explanation delivered by the chief executive of the security firm formerly known as BoxSentry.
Apple is being sued again over alleged disclosure of its mobile devices’ unique device identifiers (UDIDs) to third parties without users’ consent.
A flood of celebratory and congratulatory tweets on Twitter has greeted the news that internet services have been restored in Egypt.
Software quality would be much better if programmers adopted "literate programming", according to Stanford University's unique professor emeritus for the art of computer programming, Donald Knuth.
Software quality would be much better if programmers adopted "literate programming", according to Stanford University's unique professor emeritus for the art of computer programming, Donald Knuth.
Google and Twitter have joined forces to enable Egyptians to tweet using the phone to bypass a government-imposed internet blackout.
No matter which team you root for in the Super Bowl this Sunday, be careful of scams that might be lurking in your trash-talking tweets or other online communication, warns Mark Maciw, web product manager at Clearswift.
Researchers at North Carolina State University have discovered a flaw in the Android 2.3 Gingerbread mobile operating system that allows hackers to gain access to information on the phone's microSD storage card.
Source code that apparently relates to v8 of Kaspersky anti-virus has appeared on BitTorrent and other file-sharing sites in the last few days. According to news wire reports, the source code was leaked by an employee of the IT security vendor who is now in jail for intellectual property theft.
Research published today claims to show that the increasing problem of distributed denial of service (DDoS) attacks has been made worse by a tendency to misconfigure firewalls and intrusion prevention systems (IPS).
Privately held network communications supplier NewNet Communication has acquired another business from within its own parent company – secure transactions provider Traxcom Technologies. The move is expected to strengthen the security of NewNet’s mobile commerce offerings.
CyberArk has landed a prestigious project for protecting critical applications, identities and information in Belgacom's data centres in Belgium.