Infosecurity News

Imperva Acquires Prevoty, Enhances App Security
Prevoty's LA office will become newest location for Imperva.

Two-Fifths of IT Leaders regard IoT Security as Afterthought
Trend Micro research uncovers worrying lack of investment in protection

XSS Flaws Most Common Over Past Nine Years
NCC Group says it’s still uncovering decades-old flaw in its research

Smart Home Security Camera Bug Exposed
Flaw could let hackers view users’ feeds

DevSecOps Sees Slow Adoption but Wider Incident Handling
More than three-quarters of DevOps pros do not practise 'DevSecOps', or are still in the process of implementation

COSCO Hit by Suspected Ransomware
Chinese shipper’s US website and operations affected

Senator Urges Government to Kill Off Flash Now
Wyden wants to mitigate security risk well before software’s end-of-life in 2020

ERP Apps Under Attack Warns US-CERT
Digital Shadows/Onapsis report lifts lid on a worrying trend

Virginian Bank Robbed Twice in Eight Months
Hackers made off with over $2m following phishing success

Twitter Looks to Tighten Control Over Developers
Social media platform wants to reduce spam and policy abuse

Trend Micro’s ZDI Bug Bounty Goes Server Side
WordPress, Drupal et al come under the microscope in $1.5m scheme

Russian Hacking Campaign Targeted US Utilities
Hacking of US utility control rooms raises concerns over foreign adversaries.

Email-Based Attacks a Growing Risk
Whether it's phishing campaigns or impersonation tactics, attackers are preying on victims through email.

Pen Testers Abuse Configuration, Capture Creds
Rapid7 published a report on successful exploits from a season of pen testing.

City of London Police Begins Cryptocurrency Training
Officers get new courses to improve their cyber-skills

Endpoint Concerns Blight IIoT Security
SANS Institute report reveals patching problems

Surrey Police Seize £1m+ in Digital Currency for Government Coffers
Officers seized the Bitcoin from Latvian criminal

US Adults Don't Know Cybersecurity Career Options
New survey finds adults not familiar with 11 different cybersecurity job titles

Surge in Software Supply Chain Attacks
Majority of organizations see software supply chain attacks as next big threat

Attackers Go After GPON Routers, Again
Researchers discover more than 3,000 exploit attempts targeting D-Link



