> TODAY'S SUMMARY (10 articles)
Key cybersecurity updates today include the sentencing of Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad cyberattacks, highlighting ongoing threats from state-sponsored hacking. A critical vulnerability in Drupal Commerce Core is being actively exploited, urging affected online stores to patch immediately. In another alarming trend, researchers have identified a malicious ChatGPT link that can execute code in users' sessions, potentially compromising private conversations. Additionally, Cloudflare reported a significant increase in DDoS attacks, with 18.2 million recorded in Q3, reflecting a 38% rise. On the software front, major releases of Wireshark and YARA-X have been announced, addressing various bug fixes and improvements.
|
// AI-powered summary generated at 12:00
Unconfirmed reports that the hacker coding gang behind the ZeuS trojan are now working with their SpyEye counterparts gained credence last night when security researcher Brian Krebs reported on the move.
Wikileaks has released over 350 000 documents relating to the Iraq war, claiming 60% of deaths were of civilians.
Adobe Systems has issued a security advisory that a critical vulnerability exists in Shockwave Player 11.5.8.612 and earlier versions for Windows and Mac.
State chief information officers (CIOs) are appealing to the federal government for aid in implementing information security initiatives, according to Charles Robb, senior policy analyst with the National Association of State Chief Information Officers (NASCIO).
Thirteen of the world's most promising security start-ups will go head-to-head in a Dragons' Den-style pitch for funding in London next month.
External IT security auditors are a rare breed in our industry, but Infosecurity was fortunate enough to be able to talk to Matthijs van der Wel, a manager of investigative responses with Verizon Business recently.
It appears that the evercookie – a zombie cookie that can remain after the deletion of cookies from a web browser – can be disabled after all, despite earlier claims by researchers.
Open source developers have released the source code for an Android privacy tool that found 50% of apps tested were sending personal information to advertising companies.
A doctor left documents containing personal and diagnostic information about 56 patients on a train after taking it home to work on after hours.
The number of large US companies reporting unauthorized intrusions in their networks increased to 67% in 2010 from 41% in 2009, according to VanDyke Software’s Enterprise IT Security Survey.
Australia’s New South Wales government does not know whether its agencies have adequate information security safeguards in place, according to a report by the state’s auditor-general.
It appears that online frauds are not generating the revenues they used to, as Panda Security says it has seen a fraud campaign whose pitch is aimed at Russian speakers.
Biometrics-driven border controls in the UK are now well advanced, with a trial at London Stansted so successful, that the technology is now being rolled out at Heathrow Airport.
Senetas Technology is teaming with ID Quantique (IDQ) and Siemens to deploy the first commercial quantum cryptography system in the Netherlands, according to the companies.
The UK government plans to spend £650m over four years on a National Cyber Security Programme to beef up the nation’s defenses against cyber attack.
Local media reports in the Lake District have revealed that an unencrypted USB stick – apparently containing details on the Sellafield nuclear site's operations – have been found by a coach driver in a Cumbria hotel room.
Google's contracts with large Chinese advertising resellers will end on 27 October, the company has announced.
A recent attack by the Zeus trojan virus used an email and a legitimate Internal Revenue Service (IRS) website to trick users into providing sensitive tax information to cybercriminals.
Cyber attacks on UK government and business computers and networks pose a top threat to the United Kingdom, according to the new National Security Strategy.
Symantec’s ‘State of Spam and Phishing’ report this month has highlighted an overall decrease in spam, but an increase in phishing attacks.