Infosecurity News

Dramatic Increase in Abuse of File Sharing Services
FireEye reveals use of legitimate services to deliver malware

Recipe for Disaster as Tech Support Scammers Use Paid Search
Cyber-criminals use search ads for recipes to lure victims

ICO Issues Notices After Met Police Contravenes GDPR
London police force failing to deal promptly with subject access requests

'Dashboard Act' Would Force Orgs to Disclose Data
The US Senate proposes a law to broaden data oversight and regulations.

Breach at Dominion National Likely Began in 2010
Dominion National announced that it is addressing a security incident.

#DISummit19: Fraudsters Shifting Focus to Mobile Attacks
Mobile fraud is less-targeted, but not for long

#DISummit19: Online Fraud Becoming More Complex & Sophisticated
New fraud opportunities are emerging as attacks become more complex

#DISummit19: Fraudsters Always React & Respond to Better Security
Collaboration is key to preventing online fraud

China Blamed for APT Attacks on Global Telcos
APT10 pegged for sophisticated multi-year spying operation

UK Firms Riddled With Vulnerable Open Source Software
Sonatype warns they each downloaded 21,000 flawed components in 2018

Social Engineering Forum Suffers Major Breach
Over 89,000 accounts compromised after platform flaw is exploited

Botnet Abusing Android Debug Bridge, SSH is Back
A cryptocurrency-mining botnet leverages open ADB ports, researchers say.

Incomplete Fix Leads to New Kubernetes Bug
A high-severity vulnerability impacts kubectl.

Ethics and Compliance Programs Growing More Mature
Strong buy-in from leadership drives success of ethics and compliance programs, study finds.

US Adds AMD Joint Venture to Entity List
Five more Chinese organizations are blacklisted

Phishing Attack Exposes PII on 645,000 Oregonians
State's Department of Human Services is found wanting on cyber awareness

US Warns of Destructive Iranian Cyber-Attacks
CISA boss says “wiper” raids may be on their way

66% of Homes in North America Have Multiple IoT Devices
The majority of devices still support weak protocols, report says.

Dell Advises PC Users to Update SupportAssist
PC-Doctor issues a fix for a severe vulnerability that could affect multiple laptops.

Desjardins Insider Accessed Data of 2.9m Members
A malicious employee is fired for unauthorized access to member data.



