Infosecurity News

Breach Exposes Sensitive California State Employee Data
Thousands of Social Security believed to have been exposed

Hackers Target Indian Lender Via Swift Transfers
Cyber-criminals tried to transfer $2m in unauthorized remittances

Five Eyes Nations United in Blaming Russia for NotPetya
Putin administration condemned again

Unlucky 13: DoJ Indicts Russians for US Election Meddling
Reveals a systematic attempt to swing 2016 election in Trump’s favor

7900 Vulnerabilities Didn't Make It into the CVE Database in 2017
Last year broke the previous all-time record for the highest number of reported vulnerabilities, with 20,832 of them cataloged.

Spam Ticked Downward in 2017, but Phishing Was Up
Phishing was up 59% over 2016.

Siemens, Airbus and Others Ink Charter on Critical Infrastructure, IoT
The nine-member group outlines 10 action areas, and it has agreed to pioneer independent certification for infrastructure.

AV Evasion Mastermind Gets Two Years
Essex man sentenced to two years behind bars

Malware Spikes Coincided with 2017 Geopolitical Incidents
Backdoors are also on the rise for 2018, according to Comodo

WikiLeaks Chat Reportedly Reveals GOP Bias
Site wanted party to win last presidential election, according to reported leaks

FedEx S3 Bucket Exposes Private Details on Thousands Worldwide
It contained more than 119,000 scanned documents, including passports, drivers’ licenses, names, home addresses, phone numbers and ZIP codes.

Two Billion Files Leaked in US Data Breaches in 2017
The most targeted and vulnerable industry was healthcare, which recorded 328 leaks (nearly 60% of all leaks in 2017).

Hack the Air Force 2.0 Flies High with $12.5K Payout
Overall, white hats received $103,883 in payouts and reported 106 vulnerabilities within 20 days.

Intel Offers Up to $250K for Side Channel Flaws
Chip giant’s bug bounty program is now public

UK Government: Moscow Responsible for NotPetya
Rare moment of public attribution on world stage

Crypto-Experts Slam FBI's Backdoor Encryption Demands
Schneier et al want Feds to show exactly how they’d propose doing it

Coinherder Campaign Nets $50 Million from Bitcoin Phishing
The campaign was unique because adversaries leveraged Google AdWords to poison user search results in order to steal users’ wallets.

Microsoft Vulnerabilities Accelerate in 2017
A full 587 vulnerabilities were reported across Windows Vista, Windows 7, Windows 8.1/RT 8.1 and Windows 10 operating systems in 2017.

Coinhive Crypto-Miner Now Affecting a Quarter of the World's Organizations
Three different variants of crypto-mining code are included in January's top 10 most-prevalent malware rankings.

IT Pros: IoT Devices Most Vulnerable to Wi-Fi Attacks
92% of IT pros concerned about risks of using public Wi-Fi on company-owned devices



