Infosecurity News

Aussie Multi-Millionaire Hit by BEC Scam
Alleged perp says he himself is a victim of fraud

North Korea Attacks London Cryptocurrency Firm
The Lazarus Group has been targeting Bitcoin industry insiders to steal their credentials.

Perceived Data Value Varies Wildly Across Industries, Countries
Shareholder data is most highly valued by IT professionals at more than $1,700 per record.

Barclays Bank Insider Sentenced for Role in Dridex Plot
Londoner gets over six years in jail

NatWest Left Red-Faced After HTTPS Gaffe
Troy Hunt spotted that the UK bank had not secured its homepage

360K New Malware Samples Hit the Scene Every Day
Ransomware and a spike in cryptocurrency miners are two reasons for the growth.

Half of Firms Fail to Fully Disclose Breaches — Report
CyberArk report uncovers litany of poor security practices

Tenable in Trouble After Spamming Customers
Security vendor also removed popular features from new product

Researchers: 1% of All Websites May Have Been Breached
UC San Diego team urges netizens to use password manager

UK Parents, Beware Private-School Fee Scams
The scam typically begins with parents receiving an email giving them payment details for the school fees, perhaps saying these have changed.

Spider Spins a Ransomware Web
Victims are given four days to pay—an unusually generous payment window for ransomware.

Just One-Third of Execs Have Heard of WannaCry — Report
CA Veracode claims execs are funding app splurge but ignoring security

GDPR: True Cost of Compliance Far Less Than Non-Compliance
GDPR is considered by respondents to be the most challenging among other data compliance regulations.

USB Encryption and Security Falls Well Short
A full 87% of employees surveyed have lost a USB drive and failed to notify their company.

Emotet Info-stealer Returns, with New Tactics
This latest offensive shows it spreading beyond financial targets and into the US and other arenas.

Bangladesh Bank Accused of Hiding Details of $81m Theft
Philippines lender says it has been completely transparent with authorities

Researchers Find Trove of 1.4 Billion Breached Credentials
Database is aggregated and allows for speedy searches

Janus Vulnerability Allows Android App Takeover
A cloned application can look and behave like the original application but inject malicious behavior.

Necurs Botnet Returns to Top 10 Malware List
The Necurs botnet started mass distribution of Scarab during the holiday, sending over 12 million emails in a single morning.

Microsoft Patches Two Critical Defender Bugs
RCE flaws spotted by UK’s National Cyber Security Centre



