> TODAY'S SUMMARY (130 articles)
Today's cyber news highlights several significant threats and trends. The largest cryptocurrency heist in history occurred as North Korean hackers stole approximately $6.3 billion from Binance by exploiting a compromised DevOps laptop. In retail, fashion retailer Resolve reported the theft of customer payment card information due to a security breach. Additionally, a malicious update to the Claude Code extension for VS Code was found to have installed persistent SSH backdoors on developers' machines. Exploits targeting critical vulnerabilities in Drupal and GitLab are actively being leveraged by attackers, raising concerns about web security. Lastly, hackers published sensitive data of over 41,000 DHS employees, emphasizing the ongoing risks to government cybersecurity.
|
// AI-powered summary generated at 20:00
As more details of the Kaspersky web site hack came to light yesterday, the same hacking forum posted details of a similar SQL injection attack, this time on a Portugese reseller for anti-malware firm BitDefender.
FraudTip, a Web security portal, claims that an internet scam is defrauding around 71 000 travellers every month by the simple expedient of routing internet users to fraudulent versions of popular booking sites.
Movies have a funny habit of becoming reality and the 1992 hacker movie Sneakers, starring Robert Redford, is no exception.
The FBI is investigating a $9m large-scale ATM fraud using cards cloned from US card processor RBS Worldpay.
Anti-malware vendor Kaspersky's site was hacked over the weekend, using an SQL injection attack. While admitting that the site was vulnerable, Kaspersky is denying that the vulnerabiity was critical. The hacker nevertheless listed what he said was the full set of tables from the firm's MySQL databas...
On Saturday, Google users were warned that all their search results were potentially harmful, due a widespread result of human error.
The annual report from IBM's X-Force security operation shows what many IT managers have suspected for some time, namely that Web application vulnerabilities represent the major risk for most organisations.
On Saturday, Google users were warned that all their search results were potentially harmful, due to a widespread result of human error.
ISACA, the Information Systems Audit and Control Association, has developed a new business model for IT security.
If you've had a high company phone bill recently, spare a thought for Martin & Hillyer, a law firm in Burlington, Ontario.
Overclockers.co.uk (OCUK), an online computer hardware reseller firm, have announced they are placing a bounty of ÂŁ10 000 on the heads of hackers behind a Distributed Denial of Service (DDoS) attack on their web site earlier in the month.
Here's a lesson in IT contingency planning, courtesy of Deutsche Bahn, the German railway network company, whose IT systems - including station indicator boards, electronic ticketing, self-service counter tickets and Internet pages - all went off line on January 14 due to single UPS failing.
'NASA hacker' Gary McKinnon has won permission from the High Court to apply for a judicial review against his extradition to the United States.
The UK government’s Infosec Training Paths and Competencies (ITPC) scheme is to transfer to the Institute of Information Security Professionals (IISP) with effect from 1 April 2009.