Infosecurity News

Phishing Attacks Bypass Two-Factor Authentication
Phishing attacks are made easy with a pen testing tool, says security researcher.

Cooking Utensil Firm OXO Files Data Breach in California
Hackers are believed to have accessed names, addresses and credit card information.

Hyatt First Major Hotel Chain to Launch Bug Bounty
Hyatt invites global security researchers to search for vulnerabilities.

Global DNS Hijacking Blamed on Iranian Hackers
Attacks seek to harvest log-ins from Middle East government users

IT Guy’s Help Snares Mexican Drugs Baron
Consultant helped Feds listen in on ‘secret’ chats

Reddit Locks Down Accounts After Security Incident
Possible credential stuffing attack prompts investigation

IcePick-3PC Malware Strain Steals Device IPs
More than 100 businesses were impacted by a malware strain targeting Android devices, says The Media Trust.

Scapy-Sploit, Plugin Problems and the Year of Drupal
Attackers target WordPress plugins and Drupal vulnerabilities, says Imperva.

Phone Carriers Selling Customer Location Data
T-Mobile, Sprint, and AT&T are selling customer location data, says Motherboard.

NHS Digital CISO Quits After Three Months
Robert Coles reportedly moves on for personal reasons

Firm Offers $2m for iOS Zero-Day Exploits
Zerodium increases pay-outs for high-risk vulnerabilities

Microsoft Kicks Off 2019 With Medium Patch Load
Some 49 vulnerabilities addressed by Redmond

Sophos Acquires Avid Secure, Expands Cloud Security
Sophos moves to augment cloud business strategy with acquisition of next-gen cloud infrastructure security company

Detection Limited Hacker Access to EWN Database
Australia's Early Warning Network says staff quickly shut down systems upon detecting intruder

Disgruntled Man Behind German Cyber-Attack
20-year-old arrested in German data breach said he was annoyed with government officials

Malvertising Campaign Delivers Info-Stealer Plus Ransomware
Malwarebytes warns users of double whammy

Coinbase Disables ETC After Double Spend Attacks
Exchange halts sends and receives after $1m blitz

Contactless Fraud Losses Double but Remain Low
UK victims still lost nearly £1.2m in first 10 months of 2018

CISOs Find Collaboration Improves Resiliency
Boards should recruit members with cyber expertise, finds ACSC report

Singapore Airlines Software Bug Results in Breach
285 KrisFlyer accounts exposed because of software glitch



