Infosecurity News

Fashion Retailer BrandBQ Exposes Seven Million Customer Records
Another misconfigured Elasticsearch database is to blame

US Judge Blocks Trump’s TikTok Ban
Another blow for the government

Texas Software Provider Reports Cyber-attack
Texas provider of software services to American schools reports cyber-attack

US Federal Agency Compromised by Cyber-Actor
Criminals gain access to unnamed federal agency using Microsoft Office 365 log-in

Student Arrested Over Cyber-attacks on Indiana Schools
13-year-old student arrested for allegedly hacking into Indiana school system

Elderly People in the UK Lost Over £4m to Cybercrime Last Year
Elderly people have also lost £2.4m in COVID-related fraud recently

Facebook Takes Down More Beijing-Backed Fake Accounts
Social network spots another attempt at influencing opinion online

#COVID19 Pushes More Fraud Online
UK banks say social engineering is on the rise

Zerologon Windows Server Flaw Used in Active Attacks
Admins urged to patch immediately to prevent system takeover

Report Outlines Importance of Providing Engaging User Awareness Training
Interesting training far more likely to change how employees think about security

Attacks Against Oil and Gas Industry on the Rise
Cyber-criminals are increasingly targeting industrial control systems in the oil and gas industry

US Customs and Border Protection Failed to Safeguard Data
CBP “did not adequately safeguard” sensitive data in facial recognition technology pilot

America Moves to Protect Free Speech Online
US Justice Department calls for reform of Section 230 of the Communications Decency Act

Evasive Malware Threats on the Rise Despite Decline in Overall Attacks
70% of all attacks in Q2 involved zero-day malware

Bug Fixes Take Twice as Long for Manufacturing Firms
Kenna Security shines a light on vulnerability management in 14 sectors

Millions Exposed in #COVID19 Surveillance Platform Snafu
Basic security mistakes leaked 54GB of sensitive medical data in India

Most UK Firms Admit #COVID19 Cloud Security Threat
Cloud adoption saved UK firms but exposed them to greater risk, says Centrify

Gaming Industry Subjected to Surge in Attacks Over Last Two Years
The sector faced 10 billion credential stuffing attacks in the two years

Thieves Fail to Auction Bruce Springsteen's Legal Documents
Cyber-criminals threaten to publish stolen Springsteen docs following auction flop

ConnectWise Launches Bug Bounty Program
ConnectWise partners with HackerOne to reward discoverers of vulnerabilities



