> TODAY'S SUMMARY (4 articles)
Today’s cybersecurity landscape highlights several critical threats. Researchers from Param have identified a vulnerability in ChatGPT where a malicious share link can execute code in a user's session, potentially exposing private chats. Meanwhile, Cloudflare reported a staggering 18.2 million network-layer DDoS attacks in Q3, an increase of 38%, averaging over 8,200 attacks per hour. Additionally, Microsoft has issued warnings regarding a malicious extension mimicking Claude Code, which establishes a persistent SSH backdoor for attackers. Organizations need to be vigilant in improving their defenses against these escalating threats.
|
// AI-powered summary generated at 08:00
A Florida couple accused of selling off patient records from a Miami-area medical center had their plea agreements rejected by a Federal court judge yesterday.
The Maryland Attorney General announced the state has settled a case against payment card processor Mid Atlantic Processing, which allegedly improperly disposed of 77 boxes containing client data.
Reports are coming in that large numbers of Twitter account holders have had their online accounts compromised, with the accounts apparently generating messages advertising a website that claims to help users attract more followers.
A newly released survey from (ISC)² shows that federal CISOs are avoiding cloud computing applications due to concerns about replicating IT security policy in the cloud.
Research just released claims to show that China, the US and the Russian Federation contributed 49% of all web-based threats reported in April 2010.
Fresh from its security problems of earlier in the week when members' chat sessions were visible to third-party users, Facebook has come under fire for allegedly installing applications on users' Facebook areas by stealth.
Fresh from releasing a range of encrypted drive kits at last week's Infosecurity Europe show, Origin Storage says that the steady stream of advances in brute force decryption techniques – which started when Russia's Elcomsoft released the first versions of its Password Recovery suite of 'utilities'...
Security professionals lack confidence that political parties will do anything to improve cyber security, according to a survey by security firm Proofpoint.
Our Lady of Peace psychiatric hospital in Louisville has notified the public of the loss of a flash drive containing the personal information of 24 600 patients.
A researcher originally blocked from giving a talk about security in ATMs will go ahead and make his presentation at the Black Hat USA conference this year.
VeriSign has released a report that seeks to assist online businesses and other enterprises in protecting themselves against distributed denial-of-service (DDoS) attacks.
A USB drive that contained the medical records of patients and personal information on NHS staff was apparently lost by a member of staff of a secure medical unit in Scotland, and has turned up in a supermarket car park.
A North Carolina man has been accused of trying to hack into an automated teller machine and change its password, according to a complaint filed by the FBI.
Social networking giant Facebook temporarily shut down its live chat service this week, after a security flaw caused the site to begin showing some users' chat messages to their other contacts.
The ISF are this year focussing on expanding their membership to include government and SME membership.
Research just released claims to show that small and medium-sized businesses (SMBs) are saying one thing and doing another when it comes to taking action to protect against the social networking activities of their staff.
Businesses are pumping information security investment into all the wrong areas, research has revealed.
Cybercriminals are selling fake and stolen accounts on social networking site Facebook in bulk in the underground economy, according to security researchers.
Two pump and dump scammers were convicted by a federal jury this week. G. David Gordon and Richard Clark, both of Tulsa, Oklahoma, will be sentenced for stock trading offenses committed between 2004 and 2006.
Today is the tenth anniversary of the LoveBug worm, which was arguably the first malware infection that used social engineering techniques to propagate itself.