> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Our Lady of Peace psychiatric hospital in Louisville has notified the public of the loss of a flash drive containing the personal information of 24 600 patients.
A researcher originally blocked from giving a talk about security in ATMs will go ahead and make his presentation at the Black Hat USA conference this year.
VeriSign has released a report that seeks to assist online businesses and other enterprises in protecting themselves against distributed denial-of-service (DDoS) attacks.
A USB drive that contained the medical records of patients and personal information on NHS staff was apparently lost by a member of staff of a secure medical unit in Scotland, and has turned up in a supermarket car park.
A North Carolina man has been accused of trying to hack into an automated teller machine and change its password, according to a complaint filed by the FBI.
Social networking giant Facebook temporarily shut down its live chat service this week, after a security flaw caused the site to begin showing some users' chat messages to their other contacts.
The ISF are this year focussing on expanding their membership to include government and SME membership.
Research just released claims to show that small and medium-sized businesses (SMBs) are saying one thing and doing another when it comes to taking action to protect against the social networking activities of their staff.
Businesses are pumping information security investment into all the wrong areas, research has revealed.
Cybercriminals are selling fake and stolen accounts on social networking site Facebook in bulk in the underground economy, according to security researchers.
Two pump and dump scammers were convicted by a federal jury this week. G. David Gordon and Richard Clark, both of Tulsa, Oklahoma, will be sentenced for stock trading offenses committed between 2004 and 2006.
Today is the tenth anniversary of the LoveBug worm, which was arguably the first malware infection that used social engineering techniques to propagate itself.
In a bid to help prevent websites being hacked without the owner's knowledge, a Singapore-based hosting service provider has created a service which will alert site owners to any major activity on their sites/pages.
In an ironic turn of events, Luis Corrons, technical director with Panda Security, has revealed that two of the three techies allegedly behind the Mariposa botnet have requested jobs with Panda Security.
UK IT security and data protection firm Sophos has agreed to sell a majority interest in the company to global private equity group Apax Partners.
The US government has released further information about its plans to store every Twitter post ever produced, for perpetuity, in the Library of Congress.
IBM is considering cutting three-quarters of its 399,000 permanent staff in the next seven years and re-hiring them for projects as part of an HR strategy due to end in 2017.
Research just released suggests that the public sector's move to green IT – which forms a central plank of many organisation's IT security strategies when moving to cloud computing – is more of a myth than reality.
Things are not looking good for Terry Childs, the former San Francisco network administrator who compromised the city's network and essentially held it to ransom. Childs was convicted of computer tampering this week, and now faces up to five years in jail.
Security researchers have identified a new version of the Storm worm that plagued the internet three years ago. The new version uses HTTP for command-and-control purposes instead of the original peer-to-peer approach, say reports.