> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
A newly-discovered vulnerability in a common wireless network encryption standard is a timely warning to business to upgrade to the latest encryption version, say security experts.
A Russian firm at the heart of fake anti-virus software, which allegedly generates false virus and malware alerts when the package is loaded, has boasted of making $5 million a year.
Executive Alliance, provider of premium leadership recognition forums worldwide, has announced the winners of the Information Security Executive (ISE) and Project of the Year United Kingdom and Ireland Awards for 2008.
As the holiday season approaches, millions of Americans are making their travel preparations, so it's hardly surprising that a large number have `clicked through' on an email that purports to be an airline e-ticket and boarding pass.
Global IP Communications claims to have developed the world's first Trojan-proof password dialog system for Windows PCs.
A rogue employee has been blamed for one of the largest data thefts in the United States in recent times, affecting as many as two million- plus customers of Countrywide home loans.
Researchers at Carnegie Mellon University have released a security plug-in for Firefox 3 that can detect – and block – access to a Web site that has problems with its security certificate.
The FBI has arrested a former Countrywide Financial Corp. employee and another man in an alleged scheme to steal and sell the sensitive personal information, including Social Security numbers, of as many as two million mortgage applicants, the Los Angeles Times has reported.
This week the media spotlight was turned towards “spam kings.” One was sent to jail while another escaped from his minimum security prison before killing his family and himself.
A disgruntled San Francisco computer engineer is still in jail five days after blocking access to the city’s system to everyone except himself. On Thursday he pleaded not guilty today to four counts of computer tampering and remains behind bars on $5 million bail.
A study regarding lost and stolen laptops at US airports, which must have sent shivers down the spines of computer security executives, has been put into doubt by news magazine, Computerworld.
Five of the world’s leading IT vendors have announced the creation of the Industry Consortium for Advancement of Security on the Internet (ICASI).
Network operators and ISPs from around the world are working together to address issues that will help block botnet-induced spam.
Targeted social engineering attacks, also referred to as spear phishing, are on the rise.