Infosecurity News

Unauthorized Data Sharing Puts Companies at Risk
Companies aren't watching what data they collect or how they share it, warns a new survey from data auditing company Netwrix

US Government Warns of Palo Alto Vulnerability
A critical vulnerability in Palo Alto's firewall operating system could give attackers administrative access, warned the US military

New Cybersecurity Standard for IoT Devices Established By ETSI
New security standard aims to prevent attacks against smart devices

Indian Government Bans TikTok and 50+ Chinese Apps
New Delhi concerned over reports of privacy and security concerns

InFraud Cybercrime Gang Member Pleads Guilty to Charges
Organization made over $560m during its seven-year history

US Suspends Sensitive Tech Exports to Hong Kong
Move comes as China passes regressive national security law

#COVID19 HMRC Phishing Scams Persist, Begin Targeting Passport Details
Fraudsters adapt phishing scams and now seek passport info of self-employed

Businesses Lack a Workable Ransomware Recovery Strategy
39% of organizations unaware of their ransomware strategy

UCSF Pays $1.14m Ransomware Fee
The University of California San Francisco admitted to paying up after being hacked by the Netwalker ransomware gang

Researchers Find New Calendar-Based Phishing Campaign
Cofense has found attackers using iCalendar files to deliver phishing attacks

Criminals Exploit Pandemic with Brute-Force RDP Attacks
ESET has noticed a sharp uptick in brute-force RDP attacks during the pandemic

Malware Incidents Fall Amid Overall Rise in Security Events Last Year
Malware incidents fell by 23% in 2019

IoT Botnet Developer Gets 13-Month Sentence
Kenneth Currin Schuchman worked on Satori, Okiru, Masuta and more

Chinese Bank Forces Firms to Download Backdoored Software
GoldenSpy hidden in tax software mandated for use by foreign businesses

Campaigners Call for Computer Misuse Act Revision on 30th Anniversary
The CyberUp Campaign calls for a revision of the Computer Misuse Act 30 years after it reached royal assent

Online Learning Platform Exposes Data on One Million Students
OneClass claimed leak was of test data, but researchers disagree

US Bill Proposes Ban on Feds' Using Facial Recognition Technology
US senators introduce bill to stop federal law enforcement from using facial recognition technology

Fraudster Jailed for Stealing Millions from US Seniors
Criminal Brit funds millionaire lifestyle by stealing savings of elderly Americans

$200m Spear Phished from Cryptocurrency Exchanges
New threat group CryptoCore steals $200m in 2 years from cryptocurrency exchanges

Microsoft: Patch IIS Bug Now to Protect Exchange Servers
Redmond warns of sophisticated multi-stage attacks



