Infosecurity News

Criminals Use Stolen Data in Sextortion Campaigns
Stolen credentials come back to haunt users in extortion-based attacks.

Formjacking Replaced Cryptojacking, Ransomware in 2018
Formjacking was the breakthrough threat of 2018, says Symantec.

Value of Stolen Card and Amazon Account Details Rockets
Top10VPN report reveals surging dark web prices in some categories

Aussie Heart Hospital Hit by Ransomware Blitz
Cabrini Hospital has reportedly been unable to access patient files for over three weeks

NCSC Boss: Huawei Security Concerns Aren’t About China
But think tank warns allowing firm to build 5G networks would be irresponsible

Lazarus Suspected of Targeting Russian Orgs
An APT believed to be sponsored by North Korea allegedly targeted financial institutions in Russia, says Check Point.

Ransomware Revenue Earning Does Not Match Infection Decline
Ransomware revenue does not decline due to businesses being targeted.

Half of UK Firms Admit to Unknown Network Devices
Forescout poll finds lack of visibility is creating security risk

Microsoft: Russians Hacking Again Ahead of Euro Elections
Fancy Bear is targeting NGOs and think tanks

Swedish Privacy Snafu Affected More Companies
Security vendor finds additional 120 exposed servers

Criminals Weaponize Open Source Tools, Target IoT
The convergence of cyber and physical worlds has created more risk.

Domain Squatting a Problem for Many Media Outlets
Washington Post and The New York Times, among media domains, have been spoofed.

Palo Alto SOARs into Agreement with Demisto
Palo Alto enters into an agreement with Demisto, augmenting its security orchestration, automation and response space.

Web Application Security Poses Greatest Risk
The average time to fix a web app vulnerability is 77.5 days, says Edgescan.

Student Data Exposed at Stanford University
A flaw in a third-party system of Stanford University exposed student data.

#CPX360: Attackers Are Delighted by the Expanding Attack Surface
Ethical hackers have to “pretend and think like a criminal”

Europe Intros Global IoT Security Standard
ETSI standard is based on UK government initiative

#CPX360: Prepare for Next Generation of Attacks with Prevention Focus
Focus on prevention, as new generations of attack appear

Russian State Hackers Take Minutes to Move Laterally
CrowdStrike report reveals most operationally efficient state hackers

Sweden’s Patient Hotline in Major Privacy Snafu
Some 2.7 million calls dating back to 2013 are exposed



