Infosecurity News

Crypto-Experts Slam FBI's Backdoor Encryption Demands
Schneier et al want Feds to show exactly how they’d propose doing it

Coinherder Campaign Nets $50 Million from Bitcoin Phishing
The campaign was unique because adversaries leveraged Google AdWords to poison user search results in order to steal users’ wallets.

Microsoft Vulnerabilities Accelerate in 2017
A full 587 vulnerabilities were reported across Windows Vista, Windows 7, Windows 8.1/RT 8.1 and Windows 10 operating systems in 2017.

Coinhive Crypto-Miner Now Affecting a Quarter of the World's Organizations
Three different variants of crypto-mining code are included in January's top 10 most-prevalent malware rankings.

IT Pros: IoT Devices Most Vulnerable to Wi-Fi Attacks
92% of IT pros concerned about risks of using public Wi-Fi on company-owned devices

Half a Century of Flaws to Fix This Patch Tuesday
RCE and privilege elevation vulnerabilities abound

Financial Services Sector Breaches Triple in Five Years
Accenture report claims cybercrime costs are higher than any other sector

Telegram Zero-Day Exploited by Crypto-Miners
Kaspersky Lab claims Russian hackers also used it to install backdoor

Employee Training Tops List of Financial CISO Priorities
Infrastructure upgrades and network defense were prioritized by just 25% of CISOs.

Equifax Brings on Home Depot CISO in Wake of Massive Breach
Farshchi is perhaps best known for being the person who took up the reins as CISO at The Home Depot after its breach.

CISOs Fear Web Threats the Most
Meanwhile, 67% of respondents claimed they don't have sufficient staff to handle the daily barrage of cyber-alerts they receive.

BEC Attacks Jumped 17% Last Year
Wire transfer fraud dominates as scammers widen the net

Euro SMBs Paid Out $98m for Ransomware Decryption Last Year
Small businesses also experienced serious downtime, according to Datto

Crypto-Wars: Bitgrail Hits Back at Dev Team After $170m 'Theft'
Crypto-exchange founder now claims Nano developers defamed him

Necurs Fuels Massive Valentine's Day Spam Campaign
The campaign delivers short email blurbs supposedly from Russian women living in the US.

MSSPs Waste Hours of Time on False Alerts
A full 44% of respondents report a 50% or higher false-positive rate on security alerts.

Lazarus Rises Again with Aggressive Bitcoin-Stealing Campaign
The campaign uses implants that have never before been seen and indicate a newly sophisticated level of attack.

IBM Patches Spectre and Meltdown for Power Servers
Big Blue also warns of new Notes vulnerability

Crypto-Mining Malware Found on 4000+ Sites
ICO, NHS, US Courts and many other government sites hit

Winter Olympics Site Taken Out for 12 Hours
Russia suspected of pre-ceremony cyber-attack



