Infosecurity News

Most Firms Rely on Trust Alone for Supply Chain Security
Accenture report reveals less than a third have adequate insight into partners

US Church Hit in $1.8m BEC Scam
Attackers compromised email accounts to trick staff

Not Managing Open Source Opens Door for Hackers
96% of commercial codebases contain open source components, report finds.

Data Dispersion Yields More Off-Prem Risk
Third and fourth parties pose the biggest risk to global businesses, the report says.

Developer Reveals Phishing Exploit in Chrome
The browser hides the URL bar in a proof-of-concept video.

Credential Stuffing Costs Firms $4m Each Year
Akamai study finds companies suffer 11 attacks each month

Police Warn Schools About Money Mule Recruiters
Police Scotland writes to secondary schools

UK Government Announces Cyber Security Ambassador
Henry Pearson will try and help UK security firms sell abroad

Google Bans Chinese Developer from Play Store
DO Global applications reportedly removed from Google Play

Security Flaws in P2P Leave IoT Devices Vulnerable
Attacks could exploit security cameras and other devices using iLnkP2P, says researcher.

FinServ Sees 60% Spike in Business Email Compromise
Identities of at least five employees were weaponized in more than half of FinServ orgs, says report.

Docker Hub Breach Exposes 190K Users
Popular container library suffers security setback

Magecart Skimming Code Found on GitHub
Malwarebytes warns code was injected into 200 e-commerce sites

Apple: We Banned Parental Control Apps for Security Reasons
Cupertino giant claims invasive MDM feature was to blame

Pros Feel Aligned with Board, Still Fear a Phish
Security professionals feel they are seeing eye to eye with stakeholders, report says.

Amnesty International Hong Kong Attacked
Initial findings by forensic investigators suggest that attack is the work of an APT linked to China.

Data Protection Commission Investigates Facebook
The DPC launches a statutory inquiry to determine whethr Facebook violated GDPR.

CISOs Consider Quitting Industry Over Surging Stress
Symantec report claims compliance is number one cause of anxiety

#CYBERUK19: NCSC and ICO Clarify Roles to Assist Incident Response
UK bodies will improve coordination to offer help and guidance

Attacks on Businesses Soar 235% in Q1
Malwarebytes report reveals growth in Trojans and ransomware



