Infosecurity News

(CS)2AI and KPMG Release Inaugural Control Systems Cybersecurity Report
First annual control systems and operational technology cybersecurity report released by (CS)2AI and KPMG

US City Fined Over Former Employee's Data Theft
$200k fine for Connecticut city that failed to terminate former employee’s access rights

Cyber-Criminals Target Naked Zoom Users
Fresh sextortion campaign tells Zoom users they could be the next Toobin

Ping Identity Acquires Symphonic to Boost API and Data Security Offering
Deal will allow users to centralize administration and enforcement to critical resources and data

Truata and Mastercard Launch Privacy-Enhanced Portal for Financial Institutions
Solution enables customer behavior to be tracked in a way that is compliant with data protection laws

The BBC Experiences Over 250,000 Malicious Email Attacks Per Day
The UK's public service broadcaster has been bombarded with malicious emails this year

Security Pros Have Role in Combatting Disinformation
Security professionals need to be tackling all aspects of disinformation

CERT/CC Aims to Tackle FUD with New CVE-Naming Bot
Vulnonym project automatically creates name for each CVE

UK Banks Face Consumer Frustration Over Digital Identity Management
Only 36% of UK banks capture and verify customer identities in the same digital channel

North Korean Malware Helps Hackers Target #COVID19 Vaccines
Kimsuky Group’s info-stealing tools have sophisticated anti-evasion features

Gold Bullion Seller Hit by Magecart Attack
JM Bullion waited several months to inform customers

Marriott Fined £18.4m Over Data Breach
ICO fines Marriott International £18.4m for failing to secure customers’ personal data

US Sanctions Russian Institute Linked to TRITON
US sanctions Russian institution linked to malware used in attack on petrochemical facility

Montreal Metro Hacker Demands $2.8m Ransom
Montreal’s transit agency will not meet hacker’s US $2.8m ransom demand

ICO Slaps £250,000 Fine on Another Nuisance Call Company
Reliance Advisory Limited made millions of unsolicited calls

Number of “Breached” Records Hits 36 Billion in 2020
Risk Based Security report shows drop in reported incidents

Scammers Spoof MAGA Hat Vendors to Steal $2.3m from Republicans
Wisconsin Republican Party appears to have been hit by a BEC attack

BEC Attacks Targeting Energy and Infrastructure Rise by 93%
Overall BEC attacks grew by 15% in Q3 compared with Q2

US: Collaboration Needed to Combat Online Child Exploitation
US assistant attorney general calls for civil society to work together to combat online child exploitation

Triple Data Breach Earns Insurer $1m Fine
Aetna agrees to pay $1m to settle three HIPAA breaches



