Infosecurity News

Quarter of DevOps Suffer Open Source Component Breaches
Sonatype also finds happy developers are more secure developers

Over 350,000 Exchange Servers Exposed to Serious RCE Bug
CVE-2020-0688 was patched in February and is being actively exploited

EU Privacy Tsar Calls for Europe-Wide #COVID19 Tracking App
Coordinated response needed to ensure GDPR compliance

Akamai CSO: Online and Remote Work is the Future of Business
Businesses that were ill-prepared for the moment that we’re in are probably finding it more challenging to operate

Scammers Target US Stimulus Checks
Fraudsters pose as financial institutions in stimulus check phishing campaign

Linux Servers Under Attack for a Decade
Platform considered safe has been under attack from Chinese APT groups for ten years

Philippines Arrests 32 on Fake News Charges
32 Filipinos charged with spreading fake news about the #COVID19 outbreak

Internet Traffic Spiked to Double Normal Rate in March
Over the last four weeks, global traffic has grown by 30%

UK Businesses Could Make Huge Savings on Cybersecurity Services
Businesses could make huge savings by purchasing cybersecurity services from smaller companies

Only a Quarter of Orgs ‘Focus’ on Cyber-Attack Prevention
Survey reveals that companies prioritize attack detection and containment over prevention

Shadow IT Represents Major #COVID19 Home Working Threat
Nearly half of security pros see it as a challenge, says Check Point

INTERPOL: #COVID19-Fighting Hospitals Facing Ransomware Deluge
Global police alerted as cyber-criminals target healthcare organizations

ICO’s Mega BA and Marriott Fines Delayed Again
#COVID19 means regulator may reconsider size of penalties

Vulnerabilities Detected in Government-sanctioned COVID-19 App
Colombian government endorsed COVID-19 app containing vulnerabilities

Data Thieves Hit California Property Management Company
San Diego data thieves target property management company Wolfe & Associates

Australians Arrested Over $2.6m Email Scam
Australians charged with altering invoices to steal millions in a BEC scam

Common Flaws Discovered in Penetration Tests Persist
Brute forcing accounts and exploitation using EternalBlue remain prevalent forms of attack

DoJ: Zoombombing Could Land You Behind Bars
As #COVID19 drives meetings online, authorities warn disruptive users

Docker Users Targeted with Crypto Malware Via Exposed APIs
Password-free installations allow hackers to profit

Zoom Blow as Thousands of User Videos Are Found Online
Default naming convention blamed for privacy snafu



