Infosecurity News
OilRig APT Significantly Evolves in Latest Critical Infrastructure Attacks
The group is using previously unseen malware to abuse Google Drive, SmartFile and ISAPI filters.
Google Adds to its Cloud Security Offering
Google goes all out with its latest announcements to its Cloud Security offering
Bitcoin's Blockchain Could Be Illegal in 112 countries
Bitcoin's blockchain can store data, including images of child pornography
Cambridge Analytica Used ProtonMail to Hide Email Paper Trails
ProtonMail now included in CA saga
Orbitz Attack Impacts Hundreds of Thousands of Consumers
Hackers likely accessed the popular travel-booking site, exposing payment card info, during two periods.
Android Banking Trojan Fakebank Adds Vishing Dimension
The malware will intercept mobile calls and direct victims to a scammer impersonating a bank agent.
FIDO Alliance Expands Authenticator Certifications
The FIDO Alliance has expanded its certification program to include multi-level security certifications.
Email Fraud is a Top Business Risk for 2018
Businesses across the globe are concerned about email phishing campaigns
UK Police Spend £1.3m on Cybersecurity Training
UK Police forces spent around £1.3m over three years according to new report
Cambridge Analytica: ICO Seeks Warrant to Search London Office
Information Commissioner urgently seeks a court warrant to enter the company’s London HQ
Twitter Users Bilked out of Big Money by Elon Musk Clones
When a verified celebrity account posts a tweet, a fraud account using the same image and display name responds with a scam offer.
Microsoft Debuts Bug Bounty for Spectre/Meltdown-Style Flaws
Microsoft has launched the limited-time bounty, while Intel launches a “virtual fences” hardware redesign.
Dragonfly Compromises Core Router to Attack Critical Infrastructure
A core Cisco router relied on by one of Vietnam’s largest oil rig manufacturers was the jumping-off point for attacks on UK energy companies.
Firefox Bug Goes Unfixed for Nine Years
Software developer discovers flaw in Firefox and Thunderbird’s password manager
Cambridge Analytica Under Fire for Data Harvesting
Data analytics firm accused of harvesting millions of Facebook profiles of US voters
Researchers Discover Security Issue on Chrome RDP
Bug discovered that allows a guest user full access to an administer’s machine using Chrome Remote Desktop
GandCrab Ransomware Finds a New Shell
This well-known malware has gotten around a free decryption tool meant to dull its claws by building a new version in just days.
Walmart Jewelry Partner Exposes Millions in Latest Cloud Storage Misconfig
MBM/Limogés Jewelry exposed data that can be used to carry out targeted fraud or phishing attempts.
DHS, FBI Warn on Russian State Actors Targeting Critical Infrastructure
The US is warning that Russian state-sponsored cyber-attackers are targeting critical infrastructure – including nuclear sites.
Vulnerability Discovered in MikroTik RouterOS
Software sold across the globe found to have vulnerability by security researchers
