Infosecurity News
Carphone Warehouse Breach Results in £400K Fine
ICO forces retailer to pay up, but larger fines await with GDPR
Patch Tuesday: More Work for Admins With 56 Flaws to Fix
Scheduled updates follow last week’s out-of-band patches
FBI Boss: We Don’t Want Backdoors, but We Do Want Access to Encrypted Devices
Wray claims Feds have nearly 7800 devices they can’t access
Reddit Users Lose Bitcoin Tips After Third-Party Breach
Reddit has confirmed that one of its email providers, Mailgun, has been breached.
(ISC)² Names Infrastructure and Security Director
Bruce Beam will lead all aspects of (ISC)²’s global IT/ICT and cybersecurity operations.
India Exposes Personal Info for 1 Billion Citizens
The Tribune of India was able to access the entirety of the state identification database for just $8.
Cloud Workloads at Risk from Security, Management & Compliance Failures
Security top concern on future cloud adoption for IT decision makers
Tories left Red-Faced After HTTPS Gaffe
UK Conservative Party lets secure cert expire
VTech to Pay $650K to Settle Kids’ Privacy Case
Digital toymaker was also accused by FTC of failing to properly secure children’s data
WPA3 Set to Secure Public Wi-Fi Networks in 2018
New protocol will land later this year
Hard-Coded Backdoor in My Cloud Devices Offers Attackers Access to Personal Photos, Videos
Threat actors could gain control over the device, exfiltrate information and spread malware.
Google Drive Exploited to Download Malware Directly from URL
Proofpoint uncovered the vulnerability and created a proof of concept exploit for the issue, which exists in the Google Apps Script.
Monero Crypto-Mining Invades BlackBerry Mobile Site
Coinhive weighed in on the Reddit thread saying that the site appears to have been surreptitiously infected.
UK Companies Set to Splurge on Cyber-Risk Mitigation
ICSA report claims cyber remains top risk for boardrooms in 2018
Attackers Target Winter Olympics with Weaponized Word Doc
New steganography tool used to obfuscate attack
UK Firms Deluged with Cyber-Attacks in 2017
ISP spots 633 daily attempts per business to breach the corporate firewall
Apple Confirms Devices Affected by Meltdown, Spectre
As vendors rush patches out, Shadow Brokers claims it has an exploit for sale.
Nuisance Adware Torments Android Users
Victims are forced to press on ads to answer or end calls, make a Wi-Fi connection, charge the phone or unlock the screen.
Private Eyes, Fire and Fines: ICO Hands Down Record Damages
A firm of loss adjusters has been fined £50K for using rogue private investigators to collect information illegally in insurance claim.
White House Bans Personal Phones in West Wing
Trump administration cites security concerns, but CISO role remains unfilled
