Infosecurity News

Threat Actors Exploiting Red Team Tool JexBoss
The NCCIC issued a CERT alert warning of vulnerabilities in the JBoss application server.

IBM's Watson to Rank Threat Severity for NIST
With thousands of vulnerabilities reported each week, NIST will rely on AI to help with scoring.

Phishing Attempts Soar to 137 Million in Q3
Kaspersky Lab reveals tried-and-tested alongside new scam tactics

Sony DDoS-er 'DerpTrolling' Pleads Guilty
Utah man carried out attacks in 2013 and 2014

Canadian Uni Shutters Network After Cryptomining Attack
Incident causes major disruption at St Francis Xavier

Lazarus Group Targets Bank Networks to Rob ATMs
Symantec uncovers Trojan.Fastcash malware used by N. Korean hacker group in ATM attacks

Most IT Security Pros Underestimate Phishing Risks
Survey finds gaps in protections against phishing threats

Nearly 4,000 Breaches Disclosed in 2018
With more than 3.6 billion records exposed thus far, 2018 not expected to reach breach levels of 2017, says Risk Based Security

Spam Botnet of Over 100K Routers Abuses UPnP
Researchers warn of many more exposed devices out there

Privacy International Files GDPR Complaints
Oracle, Experian and Equifax are among companies in the cross hairs

Pakistan Banks Not Breached, but Probably Skimmed
Central bank rejects mass hacking reports

Flaw Leads to RCE in WordPress Plugins, WooCommerce
Design flaw in WooCommerce plugin can lead to remote code execution, said RIPS Technologies

High Turnover Rate Expected for IT Pros in 2019
In the quest for higher salaries, nearly half of IT professionals in Europe plan to leave current post in 2019, according to Spiceworks

National School for Cybersecurity Opens in Senegal
Backed by support from France, Senegal launches new school for cybersecurity in Dakar

Enterprises Sinking Under 100+ Critical Flaws Per Day
Prioritizing patches is getting tougher, says Tenable

Elon Musk Bitcoin Scammers Hijack Verified Status Accounts
Some reports suggest users were conned out of $180,000

HSBC Customer Accounts Breached in US
Bank enhances authentication after unauthorized entry

Symantec Acquires Appthority and Javelin Networks
Symantec expands endpoint security solutions, purchasing Appthority and Javelin Networks.

Side-Channel Vulnerability PortSmash Steals Keys
Intel processors are being attacked by a new vulnerability that steals encrypted data.

SCOTUS Refuses to Hear Appeal of Net Neutrality
The FCC ruling to repeal net neutrality regulations remains contested.



