> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
Security researcher Brian Krebs has completed his latest research into a relatively new type of crimeware called PPI - pay-per-install - where criminal gangs are now paying commissions to third parties for any malware infections they achieve.
Google has awarded researchers close to $10,000 for identifying security flaws in its Chrome web browser; version 12 fixes 15 vulnerabilities in total.
Roughly 1% of Citigroup’s 21 million North American customers’ credit card accounts were hacked, the bank has admitted.
European Union data protection regulators have called for an investigation into a Facebook feature using face-recognition software to help tag people in images on the social media website.
The high profile failure of a state-of-the-art biometrics system at a major international travel hub in Malaysia last weekend has sent shockwaves throughout the global biometrics industry.
Ocean Bank is not legally responsible for a cyber heist of $588,000 from a customer’s online account using the Zeus trojan, according to a ruling by a judge in Maine.
Oracle surprised many of its software developers and vendors with a major update of the Java programming language this week. Although scheduled as part of its monthly update, the patches tackled no less than 17 security problems.
If companies employ pen testers to check their security out - why not mobile phone vendors? Which is pretty much what Samsung have done with their new Galaxy S2 smartphone, by handing the unit over to a hardware hacking group for custom ROM development.
A Tokyo-based Symantec researcher claims to have discovered another batch of infected Google Android apps, subverted by what he calls the follow-up to the now-infamous DroidDream malware.
Kaspersky Lab claims to have discovered the Amazon Web Services (AWS) cloud computing resource hosting Brazilian banking malware and, whilst this is not unknown, it also claims that Amazon has not responded to its reports about the darkware.
The Guardian newspaper has made the interesting assertion that the FBI has used the threat of prison to create an army of informants amongst hackers, with one in four US hackers now recruited by the law enforcement agency.
A Tokyo-based Symantec researcher claims to have discovered another batch of infected Google Android apps, subverted by what he calls the follow-up to the now-infamous DroidDream malware.
China may be behind the hack of RSA’s SecurID database and defense contractors that depend on the SecureID token for secure remote access by employees, according to security analysts.
An advanced version of the Alureon (aka TDDS) rootkit worm is reported to have been enhanced by the addition of an in-worm DHCP server.
A new Android app – FaceNiff – has been released that is claimed to allow automated cookie interception over public-access WiFi connections.
Cyber safety is more about awareness than technology, but that message is not being communicated effectively, says James Lyne, director of technology strategy at Sophos.
While a Sony representative was telling a House panel that its networks were secure, hacker group LulzSecurity was releasing a file containing personal information on over one million Sony customers.
UK spy agency MI6 is reported to have hacked one of the Jihadist publications that supports al Qaeda's cause, replacing bomb making recipes with ingredient and cooking instructions for that most dastardly of culinary weapons: cupcakes.
This week's attack – allegedly from China – against users of Google's email account servers has highlighted the dangers ahead for cloud service operators, according to Node4, a hosted IT systems specialist.
A fake iPhone was sold for ÂŁ95.00 to a worker standing outside a restaurant in Stoke-on-Trent. Unfortunately for the purchaser, Yasir Hussain, by the time he realised it was a fake, the man and his van that sold him the mobile had driven off.