Infosecurity News

Most IT Execs Have Zero Control Over Password Hygiene
More than half of IT executives in a recent survey said they rely solely on employees to monitor their own password behavior.

One Identity Acquires Balabit to Merge IAM and PAM
Identity and access management provider One Identity has acquired privileged access management vendor Balabit

Report Details 100+ Domains at Risk from IDN-Related Spoofing
Farsight Security highlights continuing challenge to combat phishing

Serial DDoS-er Pleads Guilty to Two Year Spree
Former electronics store employee bought DDoS-for-hire services

UK Man Sentenced for Tweeting Personal Data
Details included name and health details of “vulnerable adult”

Russia, China's Cyber-Capabilities Are Catastrophic
Both have the capability to launch kinetic and cyber-attacks that cause complete paralysis and/or destruction of critical systems and infrastructure.

MailChimp Found Leaking Email Addresses
If you visited a link from a MailChimp newsletter, your email address and your reading habits may have been broadcast to a site owner.

Zyklon Spreads Using Just-Patched Microsoft Vulns
The threat actors behind the full featured backdoor are banking on administrators taking their time patching.

G-Suite Security Center Aims to Improve SMB Security
New features could shift focus to proactive security

New Attack Group Fires RATs and Disc Wipers at Targets
Group targets mainly South Korean victims using native language skills

ICO Hands Out £350K Fine to Nuisance Call Company
Firm broke PECR law after making 75 million automated PPI calls

Bug-Hunting Hackers Earn Top Dollar for Efforts
Top-earning researchers make 2.7 times the median salary of a software engineer.

Three-Quarters of Businesses Saw Phishing Attacks in 2017
Further, nearly half of information security professionals surveyed said that the rate of attacks increased from 2016.

(ISC)² Names Board Chairperson, New Board Members
Kevin Charest, CISO for Health Care Service Corp. (HCSC) and the 2017 (ISC)² board of directors secretary, has been named chairperson.

World Economic Forum: Cyber-Attacks Third Most Likely Global Risk in 2018
World Economic Forum to launch new global center for cybersecurity next week

Alleged Leakedsource Admin Arrested in Canada
Man charged with trafficking in identity data

Oracle Patches Spectre Flaw in x86 Servers
January Critical Patch Update contains 237 new fixes

Only Half of UK Firms Have Cloud Security Policy
Gemalto study finds awareness, visibility and controls are sorely lacking

Meltdown, Spectre Patching Lags Thanks to AV Incompatibility
A Barkly survey found that at half of survey organizations, less than 25% of machines have received the update.

Man Running 'Product Testing' Service for Malware Made Thousands
A UK man has confessed to running a 'product-testing' service that let hackers determine whether their malicious tools could beat antivirus scanners.



