Infosecurity News

NSA Issues VPN Security Guidance
Be careful which pre-configured policies you leave on your IPsec VPN, warns the US government

Moose Remain Unaware of Lottery Privacy Breach
The Nova Scotia moose hunting lottery didn’t go entirely to plan this year

Avaddon Ransomware Still Using Excel 4.0 Macros
The Avaddon ransomware is using Excel 4.0 macros as an infection vector

Record Number Enrol in Online NCSC CyberFirst Courses
The NCSC plans to provide a mix of classroom and virtual classes going forward

V Shred Exposes Pics and PII on 100,000 Customers
Researchers at vpnMentor claim fitness firm misconfigured S3 bucket

GoldenSpy Uninstaller Appears Out of Nowhere
Backdoor removal asks more questions than it answers

Global Dating App Users Exposed in Multiple Security Snafus
WizCase researchers find unsecured online databases in US and Asia

Researchers Find Vulnerabilities in Apache Remote Desktop Software
Apache Guacamole is an open source remote access gateway

US Schools and Colleges Have Leaked 24.5 Million Records Since 2005
Educational establishments across the US have leaked millions of records since 2005, according to an analysis of public data

Hundreds Arrested After Cops Dismantle Encrypted Phone Network
EncroChat was one of the largest encrypted phone networks in operation and was mostly used for criminal activity

Security Analysts Disproportionate in their Investigation of Malware
The amount of requests to investigate Backdoors and Droppers does not correspond with their use

New Mac Ransomware Hidden in Pirated Software
OSX.ThiefQuest also contains keylogger

Security Serious Opens Nominations for Fifth Unsung Heroes Awards
Nominations open for fifth Security Serious Unsung Heroes awards

Scam Cryptocurrency Biz Dissolved After Stealing £1.5m
XtraderFX used fake celeb endorsements to lure novice investors

Facebook Privacy Snafu Exposes User Data to Thousands of Apps
Glitch meant 5000 developers continued to receive user information

SonicWall Appoints Tristan Bateup as Country Manager for Ireland
Security firm seeks to expand presence and capabilities in the country

NTT Data Center Subsidiary Settles with FTC in Privacy Spat
RagingWire promoted itself as compliant with the Privacy Shield framework even when it wasn't, the FTC said. Now it has promised not to do that again

California's CCPA Gets Enforcement Teeth Today
California is enforcing its consumer privacy protection law after a six-month grace period

Bitcoin Scammers Use Celebrity Names to Lure Victims
Online criminals are hijacking celebrity names and media brands in a complex multi-stage fraud—but where are they getting their victim data?

Remote Workers Becoming More Security Conscious Although Bad Habits Persist
Remote workers are becoming more aware of good cybersecurity practices



