Infosecurity News

Dark Web Experts: ID Fraudsters Unaffected by Police Efforts
AlphaBay/Hansa takedown has forced scammers to be more creative, says Terbium Labs

New Record 1.7Tbps DDoS Also Abused Memcached Servers
Experts urge organizations to correct insecurely configured systems

Kaspersky Lab Adds $100K Payout to Bug Bounty Program
The new top-end award will be for the discovery and responsible disclosure of severe vulnerabilities in some of the firm’s flagship products.

Gozi Trojan Turns to Dark Cloud Botnet
The campaigns are relatively low volume and targeted to specific organizations, with some of the mails even being localized.

Poor User Practice at the Root of Most Medical Device Security Risks
Use of unauthorized applications (22%) and browsers (18%) are the leading security risks.

Applebee’s Hit by POS Malware
Over 160 US restaurants in RMH franchise are affected

Non-Profit Aims to Bring More Military Vets into Cyber Roles
TechVets could help reduce chronic skills shortages

Crypto-Mining Attacks Jump 50% to Net Hackers Millions in 2017
Kaspersky Lab claims attackers are using increasingly sophisticated tactics

NIS America Suffers Card Breach, Offers Store Credit
The attack resulted in the theft of payment-card details and address information.

Malware Authors Turn to DNS Protocol as a Covert Channel
DNS command and control (C&C) and DNS exfiltration can be successful because DNS is an integral part of the internet's infrastructure.

It Could Happen to Anyone: FS-ISAC Falls for a Phish
The financial industry's forum for collaboration on critical security threats was compromised with an unsophisticated phish.

#GartnerIAM: Common Privilege Pitfalls Are Easily Overcome
There has never been a greater need for PAM

#GartnerIAM: IAM Disrupted by New Trends
IAM is being disrupted by new trends, but they need not be a problem for the business

Breaches on the Rise as 70% of Healthcare Firms Are Hit
Thales eSecurity claims 39% have been breached in the past year alone

SEC Issues Subpoenas to Crypto-Currency Firms
US regulator getting serious about nascent industry

NCSC Warns Charities of Cyber-Threats
GCHQ body releases new guidance for third sector

#GartnerIAM: Focus More on Basics Than Unknown Threats
Patching and security hygiene will remain a trend for the coming years

GitHub Hit by 1.35Tbps Memcached DDoS
GitHub was hit by a DDoS attack which peaked at 1.35Tbps via 126.9 million packets per second.

UK and Aussie Governments Sign Up to Breach Aggregation Site
Have I Been Pwned? will help keep government log-ins secure

Equifax Breach: Another Two Million Consumers Affected
Credit agency finds additional driver’s license data was compromised



