> TODAY'S SUMMARY (2 articles)
Today's cybersecurity landscape highlights a significant threat from a malicious Claude Code-branded browser extension, which has been identified to deploy a persistent SSH backdoor. Microsoft has released analysis and remediation guidance for affected users. Additionally, organizations are advised to carefully evaluate Web Application and API Protection (WAAP) solutions as they approach renewal decisions, considering integration of various tools for comprehensive security against multiple threats. Overall, the focus remains on enhancing defenses against sophisticated attacks while navigating complex security tool ecosystems.
|
// AI-powered summary generated at 04:00
A self-confessed computer hacker who pleaded guilty to some of the most serious card account hacking and ID frauds in US history, has been sentenced to 20 years in prison.
Convicted criminal mastermind Albert Gonzalez – the man behind the infamous hack of TJX's computer systems and more than 130 million payment cards – has been jailed for 20 years.
In an interesting analysis of the migration of local systems to the cloud, and the transition from desktop to laptops, netbooks and mobiles, Justin Foster, a software architect with Trend Micro, says that an unexpected transformation is taking place at the heart of server workloads and mobile device...
Protests against the UK's Digital Economy Bill are increasing, with organised protests taking place in London, Manchester and Sheffield, Infosecurity can report.
California's Symantec has taken the wraps off Web Security Monitoring (WSM), a new service for companies to check on their websites and ensure they are not being hacked, or perhaps worse, infecting their internet users.
The Conservative Party may well be an odds-on bet to win the general election later in the spring, but their reputation on the IT front took a battering this weekend after a website designed to highlight the Labour party's links to the Unite trade union seriously backfired.
eSoft has taken the wraps off a major update to its secure web filtering service, Sitefilter 3.0, which is used as a 'white label' facility by a number of third-party organizations.
Hard on the heels of its linkup with the WiFi Alliance last week, the ZigBee Alliance has announced plans to dramatically increase its presence in Europe, with the intention of meeting the European Union's 'smart grid' country programmes.
It with regret that Infosecurity has to report the unexpected death of Andrew Strong, global information security and compliance director with Unilever.
A security expert at Sophos has unveiled fake antivirus software targeting the new Windows 7 operating system.
Google has taken the wraps off an automatic web application security scanner called Skipfish, which it says will work on a number of existing web applications and check them for their levels of security.
In an effort to fix what they called a “badly broken” immigration system in the US, two senators have proposed the use of biometric Social Security cards for all workers.
Google has launched a security tool called skipfish, designed to help web developers scan their applications for vulnerabilities.
Network Box USA has announced a change in the way that it sells unified threat management appliances. It is switching to a managed service model, and is no longer charging for its hardware.
A study just published claims to show that, although 78% of children knowing that hacking it is wrong, one in four of them have tried hacking into other people's Facebook accounts.
Facebook is to set up a non-profit foundation to promote and develop the online privacy movement under a legal settlement reached this week.
You've heard about Apple potentially bricking iPhones, but that's small potatoes, compared to remotely disabling whole fleets of cars using centrally controlled computer systems. That's just what a 20-year-old employee for a Texas auto dealership is being accused of doing after he was laid off last...
ISO has published two new documents outlining principles and guidelines for secure archiving of electronic medical record data.
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.