> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
It with regret that Infosecurity has to report the unexpected death of Andrew Strong, global information security and compliance director with Unilever.
A security expert at Sophos has unveiled fake antivirus software targeting the new Windows 7 operating system.
Google has taken the wraps off an automatic web application security scanner called Skipfish, which it says will work on a number of existing web applications and check them for their levels of security.
In an effort to fix what they called a “badly broken” immigration system in the US, two senators have proposed the use of biometric Social Security cards for all workers.
Google has launched a security tool called skipfish, designed to help web developers scan their applications for vulnerabilities.
Network Box USA has announced a change in the way that it sells unified threat management appliances. It is switching to a managed service model, and is no longer charging for its hardware.
A study just published claims to show that, although 78% of children knowing that hacking it is wrong, one in four of them have tried hacking into other people's Facebook accounts.
Facebook is to set up a non-profit foundation to promote and develop the online privacy movement under a legal settlement reached this week.
You've heard about Apple potentially bricking iPhones, but that's small potatoes, compared to remotely disabling whole fleets of cars using centrally controlled computer systems. That's just what a 20-year-old employee for a Texas auto dealership is being accused of doing after he was laid off last...
ISO has published two new documents outlining principles and guidelines for secure archiving of electronic medical record data.
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.
Ipswitch has launched the WhatsUp Event Log Management Suite, including its newly acquired WhatsUp Event Rover 3.0, two tools that it hopes will make it easier for customers to manage their networks by logging security events, while protecting files for forensic investigations.
The Federal Communications Commission unveiled its new National Broadband Plan to the public yesterday, and shortly thereafter submitted its recommendations to the US Congress.
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.
DVD rental company Netflix has quietly cancelled a sequel to its Netflix Prize, a contest to enhance its movie recommendation technology using anonymous user data.
After several months of quietly hiring staff in the European IT security industry, Sunbelt Software has opened a new sales and research centre in Marlow.
The St. Louis Metropolitan Police Department is investigating a cyber attack that may have compromised the information of 24 people.
Researchers claim to have broken 1024-bit RSA encryption in the OpenSSL cryptography library, although the hardware-focused attack is difficult to carry out and involves disrupting power supplies.
The Jericho Forum has taken the wraps off a self-assessment tool designed to evaluate the effectiveness of IT security products.