> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Reddit plans to restrict access to logged-in users to combat content scraping, while blockchain firm Chainalysis reported a data breach involving customer data exposure due to advanced attack techniques. The emergence of the VOLTA infostealer malware, which employs AI to profile and prioritize victims for data theft, underscores the increasing sophistication of cyber threats. Additionally, critical vulnerabilities in Drupal Commerce and Ivanti Connect Secure are being actively exploited by attackers, raising alarms for online retailers and organizations using these platforms. Cloudflare reported a staggering rise in DDoS attacks, with 18.2 million incidents recorded in Q3, marking a 38% increase. Finally, users are warned about potential risks from malicious ChatGPT links that can execute code in their sessions, compromising private conversations.
|
// AI-powered summary generated at 16:00
The Defense Advanced Research Projects Agency (DARPA) is undertaking a number of cybersecurity research and development projects for the Department of Defense designed to prevent surprise cyberattacks.
Kaspersky Lab's malware analyst Alexei Kadiev has posted an interesting analysis on how the Bredolab botnet – which infected around 30 million PCs at its height – functioned.
Security researchers from Symantec claim to have spotted a new crimeware toolkit being sold in the underground marketplace. The toolkit – known as Dream Loader – generates a trojan that is exclusively used to distribute malware.
Hotmail is claiming it can now tackle its biggest security issues with a way to send and receive active e-mail messages.
Shlomo Kramer is well known in the IT security industry for being a co-founder of Check Point and, more recently, has been CEO/president of data security specialist Imperva. Infosecurity caught up with him in London this week for his observations – and predictions – on what will be the main IT secur...
A new feature on Facebook is, at the very least, questionable, and may even be a social networking risk, says a leading IT security researcher.
Wondering what to give your loved one who just happens to be an information security professional? Why not give him or her the 12 principles of information security developed by the three leading information security organizations.
Bank of America recently won a ruling blocking four former employees of its U.S. Trust unit from using the bank’s client information at their new employer, Dynasty Financial Partners.
The Ohio State University said that a university server containing personal information on 760,000 people was accessed by hackers. The university stressed that it had no information that the personal information was taken from the server.
Leading technology businesses are backing an initiative to help organisations secure global supply chains against cybercrime threats.
The number of smartphone malware infections have increased 33% this year over 2009 figures, according to a survey by network-based security provider AdaptiveMobile.
Antid0te, a tool developed by security researcher Stefan Esser, is expected to provide security protection against worms that attack a jailbroken iPhone.
Cloud security has been something of a hot topic so far this year but, according to Colin Bannister, CA Technologies' chief technology officer, it will be even more of a hot topic on company agendas as we move into the New Year.
It seems that ATM skimmers – fraudsters who attach magnetic stripe skimming devices to cash machines – have moved up a notch or two in the technology stakes by adding GSM-equipped data modems to their readers.
The Zeus botnet is targeting credit card accounts of major US retailers Macy’s and Nordstrom by injecting a pop-up that asks for personal information to access the card holder’s account, according to Trusteer.
The WikiLeaks attackgeist known as Anonymous has staged distributed denial of service (DDoS) network attacks on more sites, including Moneybookers and the Dutch National Police Service.
Imperva, the web security specialist, has reported that the tool released by the Anonymous Hacker Group for would-be WikiLeaks protesters has been downloaded over 40 000 times, with the majority of downloads occurring in the US.
The WikiLeaks attackgeist known as Anonymous has staged distributed denial of service (DDoS) network attacks on more sites, including Moneybookers and the Dutch National Police Service.
It seems that the cybercriminal gangs behind the malware distribution networks are now tapping into the power of major ad-farming networks on the internet.
Online retailing was disrupted yesterday when Visa and Mastercard were targeted by hackers following the firms' refusal to process WikiLeaks payments.