Infosecurity News

Machine Identity Failings Expose Firms
Venafi warns of a coming security storm

Chinese Hotel Breach May Have Hit 100 Million+ Customers
GitHub snafu thought to be to blame

Air Canada Presses Reset After App Security Snafu
Around 20,000 mobile accounts affected after unauthorized access

Stamping Out Art Forgery with Cryptocurrency
Blockchain and decentralized ledger technology find a place in the art world

Cryptocurrency Platform Suffers Data Breach
More than 261,000 Atlas Quantum customers were affected in the breach.

Website of Rapper Cardi B Littered with Spam
Soccer-fan spammers target Cardi B’s website with fake videos, links, and photos.

Instagram Bids to Boost Transparency and 2FA
Support for third-party authentication and response to Russian activity announced

Over 50% of Top Global Sites Now on HTTPS
Security milestone but still a long way to go

Cryptomining Malware Soars 956% in a Year
Trend Micro blocked over 20 billion threats in the first six months of 2018

A DDoS Knocked Spain's Central Bank Offline
A DDoS attack on Banco de Espana began on Sunday and lasted through Tuesday.

Two CERT Alerts, Only One With Known Solution
CERT alerts on vulnerabilities in Ghostscript software and Windows task manager allow hackers to gain elevated system privileges.

NIS Directive Met, Polish Cybersecurity in Effect
One of 17 countries to miss the NIS Directive deadline, Poland's National Cybersecurity System Act is now in effect

ICO Breach Complaints Jump 160% in a Year
GDPR thought to be a key factor

BEC Detections Soar 80%
Mimecast spots 41,000 attacks missed by others

Unprotected MongoDB Account Exposes 200K Files
Researcher finds fault with developer’s security processes

SMB Employees Fail to Take Cyber Threats Seriously
Small businesses that fail to offer security training remain at risk from employee ignorance, a new study finds.

Risks and Rewards of Google's Improving Security
A Google tool detects bad actors and defends against nation-state threats.

NIST Calls For Comment of Ecommerce Security
The NIST announces a draft of MFA security solutions to defend against ecommerce fraud.

Iranian Threat Group Targets Universities
COBALT DICKENS is likely responsible for large campaign targeting university credentials.

No Financial Data Compromised in T-Mobile Breach
The T-Mobile security team discovered and stopped unauthorized access of customer data.



