Infosecurity News
Swisscom Breach Hits 10% of Swiss Population
Telecoms firm says intruders got in via sales partner's access rights
Uber CISO: "No Justification" for Failure to Disclose Massive Breach
“It was wrong not to disclose the breach earlier,” said John Flynn, speaking at a hearing on Capitol Hill.
42% of the Web's Top Sites Are Compromised
Sites are running vulnerable software, have been breached or have been used to distribute malware.
ShurL0ckr Ransomware Evades Malware Detection in Google Drive, O365
Further analysis showed that a full 44% of scanned organizations had some form of malware in at least one of their cloud applications.
Suspected ATM Jackpotting Fraudsters Arrested
Two men arrested outside cash-point dispensing $20 notes
Business Wire Suffers Week-Long DDoS Attack
Press release site under sustained pressure
Adobe Issues Emergency Fix to Foil North Korean Hackers
Priority 1 bulletin fixes zero-day flaw
2017: Worst Year Ever for Data Loss and Breaches
The number of records compromised also surpassed all other years, with over 7.8 billion records exposed, a 24.2% increase over 2016’s previous high of 6.3 billion.
Organizations Spend a Whopping $16M per Year on Detection Tools
Upfront costs are dwarfed by the human costs of managing and assessing the millions of alerts and false-positives these tools generate.
Flaw in TLS/SSL Certificates Allows Covert Data Transfer
A proof of concept simulates a threat actor transferring the Mimikatz malware over TLS negotiation traffic.
NHS Trusts Have All Failed Cyber Essentials - Report
Best practice security still eluding UK healthcare
Alleged US Government Hacker Love Wins Extradition Case
High Court judges say he should face trial in the UK
Hiscox: Global Firms Still Struggling to Get Cyber-Ready
Larger firms that spend more are in the lead
Emily Biggs Crowned Security Champion of the Year at Women in IT Awards
Infosecurity Magazine talks to Emily Biggs, winner of the Security Champion of the Year award
Adobe Flash Zero-Day Spotted in the Wild
Threat actors are exploiting the vulnerability to distribute the DOGCALL/ROKRAT malware to South Korean victims.
Winter Olympics Attack Expands with Top-Tier Spyware
Additional implants are being used as a second-stage payload to gain persistence for continued data exfiltration and for targeted access.
12,000 Social Media Stars Exposed in Latest Cloud Misconfig
A marketing agency made public a raft of information about influential "creators" – mostly Instagram, Twitter and YouTube personalities.
NCSC’s ‘Active Cyber Defence’ Initiative Boasts Impressive First-Year Results
More than one million security scans and seven million security tests carried out on public sector websites
API Security Concerns Are on the Rise
More than two-thirds (69%) of organizations are exposing APIs to the public and their partners.
Fraudulent Money Transfers Cost Orgs $352K on Average
Incidents quadrupled in 2017, with losses ranging from a few thousand dollars up to $3 million.
