Infosecurity News

Sextortion Scammers Pose as Corrupt CIA Agents
Victims told their names were found in large investigation of online pedophiles.

New Adware Found in 200+ Google Play Apps
Plug-in displays ads on user's lock screen.

Entrust Datacard Closes on Thales' nCipher Security
Entrust Datacard positions itself to grow with general purpose HSM market.

Researchers Find 40,000+ Containers Exposed Online
Misconfiguration creates extra security risk, warns Palo Alto Networks

GateHub Users Lose $9.7m to Hackers
Cryptocurrency wallets come under fire

Regulator Slams Cathay Pacific Over Breach
Two groups accessed airline’s IT systems

Healthcare Orgs Hit with Destructive Attacks
Attacks on healthcare industry are increasingly more targeted, report says.

NSA Warns Windows Users to Upgrade, STAT
Threat of cyber-attacks lingers from BlueKeep vulnerability.

Australian Police Collect 9K+ Docs in ABC Raid
A raid on the Australian Broadcasting Corp. is a sign that journalists may need to do more to protect their data and sources.

#Infosec19: Mitigating Risks and Managing Third Party Threats
The average number of third party connections to a facility is 583

#Infosec19: MITRE ATT&CK Framework Effective in Defending CNI
A focus on reducing detection and response times is crucial

#Infosec19: Passwords Are Here to Stay, Warns Troy Hunt
Usability will always trump security problems, says HaveIBeenPwned founder

#Infosec19: “We Can Build Safe 5G Networks Irrespective of Supplier” – NCSC
Security focus needs to be on solutions, not fear-mongering, says Ciaran Martin

#Infosec19: DNS Rebinding Attacks Could Hit Billions of IoT Devices
#Infosec19: DNS rebinding attacks could hit billions of IoT devices

#Infosec19 Dark Web Sales Offer Network Access for $10,000
Access to FTSE 100 and Fortune 500 corporate networks has increased on the dark web.

Tennessee Valley Authority Isn't Compliant with Federal Directives
The review was part of an annual audit plan to ensure the TVA's websites and emails were federally compliant.

UK Hasn't Made Sufficient Progress in National Security Strategy
A weak evidence base and lack of business case has made it difficult for the Cabinet Office to assess whether it will meet all its objectives.

SentinelOne Secures $120 Million Series D Funding
Funding will be used to accelerate the company's displacement of legacy and next-gen competitors.

#Infosec19: Identify and Protect your Very Attacked People
Identify and protect your “very attacked people” as attackers look for high value targets

#Infosec19: Complex Legacy IT Problems Can't Be Solved with Simple Solutions
The business is key to defining the most critical systems to secure



