> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
The UK government has lost personal data on every child in the country, as well as national insurance numbers and bank account details of parents and carers claiming child benefit, on two password-protected CDs sent through an internal mail service.
The UK government has lost personal data on every child in the country, as well as national insurance numbers and bank account details of parents and carers claiming child benefit, on two password-protected CDs sent through an internal mail service.
The UK information commissioner’s office (ICO) has asked the government to make serious breaches of the Data Protection Act a criminal offence, rather than attracting fines as at present.
When building an information security team, it is just as important to recruit on the basis of personality as it is to find someone with the right technical qualifications, according to Peter Berlich, a director of (ISC)2.
New biometric technologies and plans for increased surveillance are jeopardising society’s right to liberty and privacy, argued David Murakami Wood, managing editor of Surveillance & Society, at the Biometrics 2007 conference on Friday 19 October.
A fingerprint recognition system failed to prevent black-listed fans from entering football grounds and was easily fooled by simple spoofing techniques, according to a trial by Dutch research organisation TNO.
Finding the right balance between internet security and privacy is becoming increasingly hard when addressing cyber terrorism, experts at last week’s annual ISSE conference argued.
Biometrics has changed in several significant ways over the last decade, according to a prominent expert in the field.
Users of IT security products should see no gaps in service resulting from floods in Britain, despite the location of several vendors in some of the worst-affected towns.
Google is buying its way into the infosecurity market, through purchasing security service provider Postini for $625 million (£310m, EUR458m) in cash, it said on 9 July.
This year, the Victory Challenge team introduced security into their game plan as they challenged the Swiss defender Alinghi, in the 32nd America’s Cup.
Eighty per cent of infected websites have been compromised by a third-party hacker, according to the latest threat statistics from Sophos.
Lloyds TSB has purchased pattern-recognition software from US vendor Actimize for detecting employee fraud within its retail banking operation. Use of such software is already common in financial services for spotting fraud in external transactions, such as credit card spending.
One gang is responsible for more than half of all attempted phishing for the likes of online banking log-in details, and has found ways to extend the lives of its web-sites, according to researchers at Cambridge University.