Infosecurity News

Bugs Rack Web Host Sites and Flight-Booking System
Two independent security researchers disclose vulnerabilities in web hosting platforms and an airline reservation system.

New Magecart Group Hits Hundreds of Sites Via Supply Chain
Attack targets French ad agency

Alleged SEC Hackers Charged in Insider Trading Conspiracy
Ukrainian men said to have stolen non-public documents

IT Teams Have One Year to Move Off Windows 7
UK security experts urge organizations to plan upgrade

Orgs Slow to Advance IoT Security
IoT security showed incremental improvement in 2018, says Gemalto.

City of Del Rio Hit by Ransomware Attack
Del Rio, Texas, is working with the Feds after the city suffered a ransomware attack.

Shutdown a Threat to IT Security Recruitment
Recruitment of top talent is potentially compromised as government enters into its 25th day of a shutdown.

UK Banks Finally Issue New Cards After Ticketmaster Breach
Suspicious activity was first reported to ticketing firm in April

Bug Bounties Aren't Silver Bullet for Better Security: Report
MIT report also claims researchers rarely make good money from them

Polish Government Mulls Huawei Ban After Employee Arrested
Sales director sacked after being cuffed on spy charges

Three Flaws in Schneider Electric Charging Stations
Vulnerabilities could allow attackers to stop charging process, says Positive Technologies.

Singapore Airlines Warns of Phishing Scam
A fake survey promises free airline tickets via WhatsApp.

Crypto-Mining, Banking Trojans Top Malware Threats
Coinhive holds the number-one malware spot for the 13th month in a row, says Check Point.

BSIA Publishes Guidelines to Reduce Exposure to Digital Sabotage
Guidelines will assist the supply chain in their duty of care to other network users

Third-Party Breach Exposed 31K Patient Records
Managed Health Services of Indiana Health Plan announced two security incidents.

Dems Use Fake News Propaganda in Alabama Campaign
A cybersecurity firm reportedly aided progressive group of Democrats in spreading fake news to take down Roy Moore.

Side-Channel Attack Targets Windows, Linux
A hardware-agnostic page cache attack targets operating systems.

US Shutdown Plays into Hackers’ Hands
Expired web certificates expose users to man-in-the-middle attacks

Zurich Refuses to Pay Out for NotPetya ‘Act of War’
Confectionary maker Mondelez is claiming $100m

MongoDB Instance Leaks 200 Million Chinese CVs
Exposed database spilled huge volume of sensitive data online



