> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Reddit plans to restrict access to logged-in users to combat content scraping, while blockchain firm Chainalysis reported a data breach involving customer data exposure due to advanced attack techniques. The emergence of the VOLTA infostealer malware, which employs AI to profile and prioritize victims for data theft, underscores the increasing sophistication of cyber threats. Additionally, critical vulnerabilities in Drupal Commerce and Ivanti Connect Secure are being actively exploited by attackers, raising alarms for online retailers and organizations using these platforms. Cloudflare reported a staggering rise in DDoS attacks, with 18.2 million incidents recorded in Q3, marking a 38% increase. Finally, users are warned about potential risks from malicious ChatGPT links that can execute code in their sessions, compromising private conversations.
|
// AI-powered summary generated at 16:00
A German hacker has successfully cracked a six-character implementation of the 160-bit SHA-1 crypto algorithm using a cloud computing resource. The hack was completed in 49 minutes at a cost of just $2.10.
Private companies may be required to open up data and make their activities answerable to Freedom of Information (FoI) law when they are contracted to work for the public sector.
The organisers of this year's 5th Global Security Challenge have announced the two winners of the competition, which means the pair of firms – classed as most promising security companies in the world – will share $500 000 investment provided by the US Department of Defense.
Fraudsters on eBay are reportedly side-hacking the Kodak Gallery service using a fake redirect technique.
After plundering users' online bank accounts using stolen credentials, it seems that the continually evolving ZeuS malware is now targetting company data assets via their enterprise access gateways.
Nearly all of the security professionals surveyed by Solera Networks said they need real-time situational awareness, known as network forensics, to make their networks more secure, yet only 19% said they have this capability.
The desktop security business model needs to evolve to actually prevent new malware infections, not just block old ones or clean up already infected machines. This is according to Comodo CEO and president Melih Abdulhayoglu.
The latest version of a rootkit targeting Microsoft Windows has begun hitting 64-bit versions of the operating system.
Rather than speaking solely about the business challenges inherent with cloud security, Microsoft’s Scott Charney chose to address the social implications of cloud-based computing during his opening keynote address at today’s Cloud Security Alliance (CSA) Congress in Orlando.
Police have forced the suspension of a website that offered advice to students photographed at last week's student fees demonstration in London.
A data breach at Holy Cross Hospital in Ft. Lauderdale, Fla., resulted in the theft of sensitive information concerning 1500 patients who visited the hospital’s emergency room.
The command and control servers for a Koobface botnet swarm, which reportedly raked in $2 million a year for its operators, were closed down late Friday UK time, following a concerted effort by industry experts and law enforcement officials on both sides of the Atlantic.
Eavesdropping of mobile communications, once a tool mainly available to only the intelligence community, has transformed into a widely available criminal enterprise, says two security experts from SRA International.
Email and web security specialist Barracuda Networks has launched a 'bug bounty' scheme – offering programmers more than $3100 to anyone who can hack into their security software – and has immediately flown into a storm of criticism for sending the wrong message.
Over a million mobile phones in China have been hit by a virus that steals contact information to commit click fraud and propagate the virus.
Verizon has launched a website designed to collect and share information about data breach incidents that are reported by participating organizations.
An IT security researcher has reportedly released the source code that could allow a hacker to gain remote access to a Google Android smartphone across the internet.
Digital rights management (DRM) is fast becoming a normal security feature in a growing number of Far Eastern companies and, says Jason Sohn, deputy general manager with Korean DRM specialist Fasoo.com, the same thing is now happening here in the UK.
Rep. Yvette Clarke (D-NY) delivered the evening keynote during the SC Congress in mid-town Manhattan yesterday, as the member of the House Committee on Homeland Security told the audience that the US electric grid remains vulnerable to a near-certain cyber attack.
Hewlett-Packard is to pay $16.25m (ÂŁ10m) for alleged fraud, following an extensive investigation by the Federal Communications Commission (FCC) and Department of Justice (DoJ).