> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of PHP vulnerabilities, specifically the PHP2Shell flaws, which could enable remote code execution. A significant cyberattack on the University of New Mexico disrupted hospital operations, showcasing the ongoing risks to healthcare systems. In the online retail sector, nearly 1,000 stores were compromised with scanner-evading malware. Furthermore, the rise of AI-generated fake login pages is making phishing more effective, while the recent deepfake incident involving a UK politician underscores the dangers of misinformation and digital impersonation. Lastly, vulnerabilities in major software products, including Microsoft and Citrix, continue to pose substantial risks to organizations.
|
// AI-powered summary generated at 16:00
New biometric technologies and plans for increased surveillance are jeopardising society’s right to liberty and privacy, argued David Murakami Wood, managing editor of Surveillance & Society, at the Biometrics 2007 conference on Friday 19 October.
A fingerprint recognition system failed to prevent black-listed fans from entering football grounds and was easily fooled by simple spoofing techniques, according to a trial by Dutch research organisation TNO.
Finding the right balance between internet security and privacy is becoming increasingly hard when addressing cyber terrorism, experts at last week’s annual ISSE conference argued.
Biometrics has changed in several significant ways over the last decade, according to a prominent expert in the field.
Users of IT security products should see no gaps in service resulting from floods in Britain, despite the location of several vendors in some of the worst-affected towns.
Google is buying its way into the infosecurity market, through purchasing security service provider Postini for $625 million (£310m, EUR458m) in cash, it said on 9 July.
This year, the Victory Challenge team introduced security into their game plan as they challenged the Swiss defender Alinghi, in the 32nd America’s Cup.
Eighty per cent of infected websites have been compromised by a third-party hacker, according to the latest threat statistics from Sophos.
Lloyds TSB has purchased pattern-recognition software from US vendor Actimize for detecting employee fraud within its retail banking operation. Use of such software is already common in financial services for spotting fraud in external transactions, such as credit card spending.
One gang is responsible for more than half of all attempted phishing for the likes of online banking log-in details, and has found ways to extend the lives of its web-sites, according to researchers at Cambridge University.