Infosecurity News

In Wake of Russia Ban, Fancy Bear Tries to Discredit the Olympics...Again
It has released dozens of emails purported to be from antidoping officials at the International Olympic Committee and elsewhere.

RIG EK Activity Declines in Q4
The exploit kit nonetheless has hung onto its lead as the most active EK out there this quarter.

Mueller Appoints Cyber Expert to Trump Probe Team
Ryan Dickey joins 16 other lawyers as investigation heats up

Cyber Security Challenge UK Appoints New CEO
Colin Lobley will take up the role following the death of Stephanie Daman

Fruitfly Malware Creator Allegedly Spied on Victims for 13 Years
Ohio programmer is indicted on 16 counts

Equifax Would Have Paid $1.5bn Under New US Breach Laws
Democrat senators Warren and Warner introduce new legislation

Bad Botnet Growth Skyrockets in 2017
There was a 37% increase in botnet command-and-control (C&C) listings in 2017, with the majority (68%) of them being hosted on servers run by threat actors.

CoffeeMiner Forces Coffee Shop Visitors to Mine for Monero
Bad guys can access all of the compute power connected to a particular public Wi-Fi network, all at once, to mine for cryptocurrency.

As Cloud Looms, Security Tops IT Resilience Investment
The majority of IT professionals are investing in virus protection (71%), malware protection (67%), patch management (53%), and IDP (52%).

Carphone Warehouse Breach Results in £400K Fine
ICO forces retailer to pay up, but larger fines await with GDPR

Patch Tuesday: More Work for Admins With 56 Flaws to Fix
Scheduled updates follow last week’s out-of-band patches

FBI Boss: We Don’t Want Backdoors, but We Do Want Access to Encrypted Devices
Wray claims Feds have nearly 7800 devices they can’t access

Reddit Users Lose Bitcoin Tips After Third-Party Breach
Reddit has confirmed that one of its email providers, Mailgun, has been breached.

(ISC)² Names Infrastructure and Security Director
Bruce Beam will lead all aspects of (ISC)²’s global IT/ICT and cybersecurity operations.

India Exposes Personal Info for 1 Billion Citizens
The Tribune of India was able to access the entirety of the state identification database for just $8.

Cloud Workloads at Risk from Security, Management & Compliance Failures
Security top concern on future cloud adoption for IT decision makers

Tories left Red-Faced After HTTPS Gaffe
UK Conservative Party lets secure cert expire

VTech to Pay $650K to Settle Kids’ Privacy Case
Digital toymaker was also accused by FTC of failing to properly secure children’s data

WPA3 Set to Secure Public Wi-Fi Networks in 2018
New protocol will land later this year

Hard-Coded Backdoor in My Cloud Devices Offers Attackers Access to Personal Photos, Videos
Threat actors could gain control over the device, exfiltrate information and spread malware.



