> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
A group of MPs have voiced their opinion that the extradition to the US of self-confessed UFO hacker Gary McKinnon should be halted - and that he should stand trail in the UK - owing to the "precarious state of (his) mental health".
Microsoft has announced guidance for applying secure programming techniques for agile software developers. The company rolled out new guidelines that will enable agile software developers to apply its Security Development Lifecycle (SDL) guidelines.
Just days after an iPhone worm was discovered in the wild, Mac security firm Intego has discovered a hacker tool targeting the iPhone that exploits the same vulnerability.
avast! CEO Vincent Steckler told Infosecurity this week that the new version of the free avast! anti-virus includes more capabilities such as behavioural detections at the same time as being faster and smaller. It can also wake up your computer in the night to do a virus scan before putting it back...
Understanding what goes on at the various secret service divisions such as MI5 and MI6, as well as GCHQ, has been helped with the news that Qosmos, a network intelligence specialist, will unveil an LI (lawful interception) edition of its ixMachine at Milipol in Paris next week.
Botnet controllers have been using cloud based systems such as the Google cloud platform as command and control nodes for infected PCs, said a researcher at Arbor Networks.
An unknown hacker - apparently protesting about terror deaths in Pakistan - has attacked the Durham Police website, forcing it to temporarily close.
Spam king Sanford Wallace has been ordered to pay US$710.7 million to social networking company Facebook following a federal court case. Wallace is said to have compromised Facebook accounts using phishing emails, and used them to send spam to other members.
It's taken a while, but the first real iPhone worm has appeared, although its payload appears to be relatively benign - unless that is, you dislike Rick Astley, the 1980s pop star from Newton le-Willows in Lancashire.
A physical pandemic such as the swine flu (H1N1) could swamp internet service providers serving residential users, according to a report from the Government Accountability Office – and the Department Of Homeland Security doesn't have a plan to deal with it.
The FBI has slammed poor security in financial institutions, after identifying a drastic rise in money being stolen from small to medium-sized businesses via spearphishing emails, it said in an intelligence note early this week.
Anti-virus companies are failing to get the joke after the release of a free arcade game for the Mac that deletes the users' files during play. Lose/Lose warns 'victims' that it is about to delete files on their hard drives before they begin playing, and it keeps its word.
Users of the Apple Mac have been warned to avoid a game called Lose/Lose which appears to include trojan programme code that deliberately deletes files on the users' hard drive.
Cisco, EMC - the parent company to RSA Security - and VMware have formed the Virtual Computing Environment (VCE) coalition, a collaboration designed to boost the adoption of virtualisation in the cloud.
Cellular specialist Giesecke & Devrient (G&D) has unveiled a memory card for Android mobile phones that is claimed to make applications running on the host Android-compliant handset ultra-secure.
Malware authors are targeting those who missed the initial sign up for Google Wave, according to Symantec.
IT security vendor Symantec has uncovered a trojan that uses the Facebook social networking portal to communicate with a command and control (C&C) server
M86, the web and messaging security products vendor, has acquired business internet security specialist Finjan for an undisclosed sum of money. The move boosts M86's payroll to a shade more than 300 staff.
The Chip & PIN system pioneered by French banks in the 1980s - and rolled out across the UK and Europe in recent years - is to be extended to payment cards in Australia, Visa's operation there has announced.
The US has officially opened a state-of-the-art unified command center for government cybersecurity in Arlington, Virginia.