> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
A security flaw found in, but not necessarily limited to, HP printers can be exploited by hackers to take full control of printer functions, according to researchers at Columbia University.
Research published today by Trusteer claims to show cybercriminals have widened the services they provide as a one-stop-shop to third-party fraudsters.
The Payment Card Industry Data Security Standards (PCI DSS) are basic information security practices that can be applied to the cloud environment in the same way as traditional environments, said Tabatha Greiner, executive consultant for global PCI quality assurance with Verizon.
A data breach at South Korean online gamer Nexon has exposed personal information on 13 million subscribers.
The Information Commissioner’s Office (ICO) has imposed some of its first fines against public bodies after staff with North Somerset Council and Worcestershire County Council sent highly sensitive personal information to the wrong recipients.
Lyceum Capital, a private equity firm, has increased the total amount spent on IT industry investment this year to more than ÂŁ100 million with the acquisition of data security vendor Clearswift.
The FBI has revealed that four hackers were arrested in the Philippines last week in connection with an organized attack on the clients of telecoms giant AT&T in the US. Newswire reports suggest that the hacker crew was funded by terrorists linked to an Al Qaeda group that carried out the Bali b...
The director of security research with Solera Networks has called malware authors “mal-slackers” for their “lazy repetitive malware scams” they have created for this US Thanksgiving.
Researchers at Context Information Security are playing down the level of risk to enterprises caused by the BEAST - Browser Exploit Against SSL/TLS – that was identified by researchers in late September.
Acuity has taken the wraps off a free PCI DSS compliance analysis application that can be downloaded from its web site. The software is billed as being able to identify, assess, manage and report on risks to cardholder data.
Research carried out by Kingston Technology claims to show that purchasing secure and encrypted USB sticks is no longer enough to defend data within a company environment.
The Information Security Forum (ISF) has published a new report on Federated Identity and Access Management that describes the methodology that IT security professionals need to adopt when implementing the technology into their systems.
Do you want the good news, or the bad news first? The bad news is that one-click fraud has, at long last, arrived on smartphones. The good news (unless you live in Japan) is that the frauds are focused on Japanese language users of mobile phones.
The long-held belief that the Apple iOS platform is inherently secure due to Apple’s walled garden approach to software has been holed once again, this time by a security firm that has developed a method of sending Fake iTunes and Flash updates to iPhone and iPad users.
Websense has slammed the latest ad campaign from Motorola for its Droid Razr smartphone, citing the fact that the Android platform is secure.
Mozilla is reported to be making inroads on adding a silent update mechanism to its popular Firefox desktop web browse, and plans to integrate the new service into Firefox 10 early next year, although this timeframe may slip a few months, the open source organization says.
Prolexic Technologies claims that it has successfully mitigated what it claims was the world's largest DDoS attack in packets-per-second (PPS) terms - 69 million packets-per-second and with an amazing 45 Gbps of traffic.
Advanced intelligence capabilities are crucial for organizations to stay one step ahead of cyberthreats, advised Rick Howard, general manager of VeriSign iDefense.
The International Organization for Standardization (ISO) has unveiled two new records management standards for storage and disclosure of corporate information.
The dangers of reporting on matters of a darker nature in the world of IT security were thrown sharply into focus today when security researcher Brian Krebs revealed he had experienced a sustained DDoS attack on his news servers.