Infosecurity News

Trump Declares National Emergency to Contain China Threat
Executive Order appears to be veiled attempt to disrupt Huawei

IT Decision-Makers Willing to Share Threat Intel
The vast majority of security leaders would share threat intelligence, an IronNet report says.

Boost Mobile Alerts Customers of Security Incident
Boost Mobile customers are urged to change their PINs.

Hospitals Failing on Cybersecurity Hygiene
Over 80% still have SMB switched on, finds Forescout

“Wormable” Bug Could Enable Another WannaCry
Microsoft urges firms to patch as soon as possible

ZombieLoad Bugs Expose Intel Machines to Data Theft
New set of data sampling side-channel attacks discovered

San Francisco Votes to Ban Facial Recognition
San Francisco could be the first city to ban facial recognition technology.

Speculators Look to ID AVs Hacked by Russia
Trend Micro confirms unauthorized access from third party, though McAfee and Symantec say no evidence of breach.

Over 460,000 E-Retailer User Accounts Hacked
Asia's largest retailer suffered a breach exposing account information of nearly half a million users

Equifax Has Spent Nearly $1.4bn on Breach Costs
Cautionary tale as credit agency pays heavily for 2017 incident

Nine Charged in $2m SIM Swap Conspiracy
Group known as “The Community” targeted victims' cryptocurrency

WhatsApp Finds and Fixes Targeted Attack Bug
Vulnerability may have been used by government to spy on users

Malicious Attacks Cause of Most Aussie Breaches
An OAIC report marks the start of Privacy Awareness Week in Australia.

ScarCruft APT Develops Malware to Target Bluetooth
The Korean-speaking threat group is testing new exploits.

Lawmakers Propose Cyber Training for Congress
House members, in addition to House employees, will be required to undergo annual cybersecurity training.

WannaCry Remains a Global Threat Two Years On
Eastern nations continue to register large numbers of WannaCry detections

ICO Calls Out HMRC for Illegal Biometric Data Collection
Tax office must delete all Voice ID data obtained without consent

SMS Spammers Expose 80 Million Records Online
Unprotected MongoDB instance found by researcher

US Indicts Chinese Man for Anthem Breach
Motives remain a mystery and individual is unlikely to be extradited

DHS Releases Analysis of ELECTRICFISH Malware
DHS issues a US CERT alert on malware used by North Korean threat group.



