Infosecurity News
Adobe Flash Zero-Day Spotted in the Wild
Threat actors are exploiting the vulnerability to distribute the DOGCALL/ROKRAT malware to South Korean victims.
Winter Olympics Attack Expands with Top-Tier Spyware
Additional implants are being used as a second-stage payload to gain persistence for continued data exfiltration and for targeted access.
12,000 Social Media Stars Exposed in Latest Cloud Misconfig
A marketing agency made public a raft of information about influential "creators" – mostly Instagram, Twitter and YouTube personalities.
NCSC’s ‘Active Cyber Defence’ Initiative Boasts Impressive First-Year Results
More than one million security scans and seven million security tests carried out on public sector websites
API Security Concerns Are on the Rise
More than two-thirds (69%) of organizations are exposing APIs to the public and their partners.
Fraudulent Money Transfers Cost Orgs $352K on Average
Incidents quadrupled in 2017, with losses ranging from a few thousand dollars up to $3 million.
Just 20% of Orgs Have Breach Notification Plans
The majority (73%) said they were “somewhat prepared” and would have to figure things out “on the fly.”
Over 500,000 Windows Machines Infected with Monero Mining Software
Crypto-mining malware spreading via EternalBlue exploit
Bomgar Acquires Lieberman Software Adding Privilege to Access
Bomgar has acquired Lieberman Software to enhance its portfolio of secure access software
JenX Botnet Emerges to Target IoT Devices and Grand Theft Auto
The botnet is for rent. Its service description reads: “God’s wrath will be employed against the IP that you provide us.”
Critical Infrastructure More Vulnerable Than Ever Before
The number of internet-accessible industrial control systems (ICS) is increasing every year, as are vulnerabilities.
Criminals Move to Cash in on Cryptocurrency Gold Rush
Cybercriminals have developed several schemes to defraud those looking to profit from the growth in cryptocurrencies.
Cisco: Crypto-Mining Botnets Could Make $100m Annually
Black hats are eschewing ransomware in favor of easier ways to make cash
US Government in Whois GDPR Warning
NTIA wants info to remain freely accessible despite new European privacy laws
Fortune 500 Staff Spill 2.7 Million Log-Ins to Dark Web
Leaked usernames and passwords for online accounts represent a growing security risk
Security Not Keeping Up with Cloud-First Business Strategies
40% of respondents in a new survey felt that their security solutions aren’t as flexible as the rest of their cloud initiatives.
UK Financial Firms Admit to "Shocking" Cybersecurity Practices
67% of respondents admit that cybersecurity practices in their organizations “would shock outsiders.”
Vulnerable Medical Imaging Devices Open the Door to Death
Hacks against MRI machines and other devices can have a real-world impact on patient health.
Hackers Steal Ransomware Payments from Fellow Crims
Proofpoint discovers man-in-the-middle attacks targeting Tor proxy
US DoJ Launches Dark Web Drugs Taskforce
J-CODE is latest response to country’s opioid crisis
