Infosecurity News

Collection #1 Data Dump the “Tip of the Iceberg”
Experts warn same seller has TBs of more recent data for sale

New Year, New Features for Fallout EK
The Fallout exploit kit uses a new Flash exploit, likely to evade detection.

Malware Evades Detection One Step at a Time
Banking Trojan Anubis was hidden in two Google Play apps.

Hackers Use PayPal to Phish with Ransomware
A new, sophisticated attack kills two birds with one stone.

CyberFirst Girls 2019 Kicks Off Next Week
Thousands expected to take part in competition for school-aged students

Facebook Disrupts New Russian Disinformation Campaign
Hundreds of pages taken down after Sputnik employees are caught out

DoJ Prepping Criminal Probe of Huawei IP Theft: Report
Case linked to 2014 theft of T-Mobile tech

Attackers Leverage Open Source in New BYOB Attack
Plug-and-play hacking kits give rise to botnet attacks.

2018 Proved Highest Funding Year for Cybersecurity
Investment in cybersecurity startups has grown 81% since 2016, says Strategic Cyber Ventures.

VOIPo Left 7 Million Logs Unencrypted with No Passwords
VOIPo alerts customers of potential security incident due to a misconfiguration

WEF: Cyber-Attacks a Major Global Risk for Next Decade
Annual report reveals continued concerns over online theft and disruption

Oklahoma Government Leaks 3TB of Sensitive Data
Publicly accessible data included info on FBI investigations

Researchers Find 87GB Trove of Breached Log-Ins
“Collection #1” dump features over 21m dehashed passwords

MS Word Documents Spreading .Net RAT Malware
Auto-execution VBA code is able to perform several malicious actions, says FortGuard Labs.

Fortnite Vulnerable to Account Take-Over Attack
Vulnerabilities could allow hackers full access to user accounts and in-game currency.

Bugs Rack Web Host Sites and Flight-Booking System
Two independent security researchers disclose vulnerabilities in web hosting platforms and an airline reservation system.

New Magecart Group Hits Hundreds of Sites Via Supply Chain
Attack targets French ad agency

Alleged SEC Hackers Charged in Insider Trading Conspiracy
Ukrainian men said to have stolen non-public documents

IT Teams Have One Year to Move Off Windows 7
UK security experts urge organizations to plan upgrade

Orgs Slow to Advance IoT Security
IoT security showed incremental improvement in 2018, says Gemalto.



