> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
The ingenuity of malware distributors has reached new levels - of depths - depending on your point of view.
As more details of the Kaspersky web site hack came to light yesterday, the same hacking forum posted details of a similar SQL injection attack, this time on a Portugese reseller for anti-malware firm BitDefender.
FraudTip, a Web security portal, claims that an internet scam is defrauding around 71 000 travellers every month by the simple expedient of routing internet users to fraudulent versions of popular booking sites.
Movies have a funny habit of becoming reality and the 1992 hacker movie Sneakers, starring Robert Redford, is no exception.
The FBI is investigating a $9m large-scale ATM fraud using cards cloned from US card processor RBS Worldpay.
Anti-malware vendor Kaspersky's site was hacked over the weekend, using an SQL injection attack. While admitting that the site was vulnerable, Kaspersky is denying that the vulnerabiity was critical. The hacker nevertheless listed what he said was the full set of tables from the firm's MySQL databas...
On Saturday, Google users were warned that all their search results were potentially harmful, due a widespread result of human error.
The annual report from IBM's X-Force security operation shows what many IT managers have suspected for some time, namely that Web application vulnerabilities represent the major risk for most organisations.
On Saturday, Google users were warned that all their search results were potentially harmful, due to a widespread result of human error.
ISACA, the Information Systems Audit and Control Association, has developed a new business model for IT security.
If you've had a high company phone bill recently, spare a thought for Martin & Hillyer, a law firm in Burlington, Ontario.
Overclockers.co.uk (OCUK), an online computer hardware reseller firm, have announced they are placing a bounty of £10 000 on the heads of hackers behind a Distributed Denial of Service (DDoS) attack on their web site earlier in the month.
Here's a lesson in IT contingency planning, courtesy of Deutsche Bahn, the German railway network company, whose IT systems - including station indicator boards, electronic ticketing, self-service counter tickets and Internet pages - all went off line on January 14 due to single UPS failing.
'NASA hacker' Gary McKinnon has won permission from the High Court to apply for a judicial review against his extradition to the United States.