Infosecurity News

Cross-Site Scripting Tops CWE's Most Dangerous List
Cross-site scripting dubbed the most dangerous software weakness in 2020 by CWE

Instacart Reveals Third Party Employees Viewed Shopper Data
Instacart reveals that employees of a third party vendor viewed shopper profiles more than was necessary

Akamai: Credential Stuffing Attacks Against Media Services Surging During #COVID19
The rise in the use of media services during lockdown is leading to more credential stuffing attacks

Volume of Stolen Cards on Dark Web Drops 41%
Russian crackdown and COVID-19 to blame, claims Sixgill

Firms Splurge on Security and Staff During Pandemic
Microsoft sees investments in technology and new hires

Former Uber CSO Charged Over Alleged Breach Cover-Up
Federal charges against Joseph Sullivan carry maximum eight-year sentence

Surge in Demand for Cybersecurity Services a Boost for UK Startups
Cybersecurity consultancies are one of the fastest growing types of startups in the UK

Sophisticated Peer-to-Peer Botnet Discovered
Peer-to-peer botnet FritzFrog has been breaching servers since January

Phone Hack Traumatizes Neighbours Actress
Olympia Valance suffers “traumatizing” phone hack that exposed her private images

US Cyber Command Gets New Operational Tools
Operational cyber tools now in use on US Cyber Command’s training platform

Poor Cybersecurity Behaviors Prevalent Amongst UK Remote Workers
23% of office workers rely on unauthorized devices to work from home

US Reveals New North Korean BLINDINGCAN RAT
Malware was used to target defense contractors, says CISA

Facebook Expands Policy to Take Down QAnon and US Militias
Social network cracks down on those promoting violence

Businesses Opt to Outsource Cybersecurity Services
UK businesses opt for outsourced partners for cybersecurity services

Experian Data Breach Hits 24 Million Customers
South African businesses also affected as fraudster tricks firm

Chrome to Warn Users Completing Suspicious Forms
Chrome users to receive warning when they start filling in a form that isn’t secure

Majority of ICS Vulnerabilities Can Be Exploited Remotely
Over 70% of industrial control system flaws disclosed in 2020 can be exploited remotely

New Vulnerability Threatens IoT Devices
Vulnerability in Thales component could endanger millions of IoT devices

SpyCloud Raises $30m in Funding to Tackle Surge in Online Fraud During #COVID19
SpyCloud will use the investment to grow its anti-fraud capabilities

Data Firm Exposes 235 Million Social Media Profiles
Comparitech finds another misconfigured online database



