Infosecurity News
Flaw in TLS/SSL Certificates Allows Covert Data Transfer
A proof of concept simulates a threat actor transferring the Mimikatz malware over TLS negotiation traffic.
NHS Trusts Have All Failed Cyber Essentials - Report
Best practice security still eluding UK healthcare
Alleged US Government Hacker Love Wins Extradition Case
High Court judges say he should face trial in the UK
Hiscox: Global Firms Still Struggling to Get Cyber-Ready
Larger firms that spend more are in the lead
Emily Biggs Crowned Security Champion of the Year at Women in IT Awards
Infosecurity Magazine talks to Emily Biggs, winner of the Security Champion of the Year award
Adobe Flash Zero-Day Spotted in the Wild
Threat actors are exploiting the vulnerability to distribute the DOGCALL/ROKRAT malware to South Korean victims.
Winter Olympics Attack Expands with Top-Tier Spyware
Additional implants are being used as a second-stage payload to gain persistence for continued data exfiltration and for targeted access.
12,000 Social Media Stars Exposed in Latest Cloud Misconfig
A marketing agency made public a raft of information about influential "creators" – mostly Instagram, Twitter and YouTube personalities.
NCSC’s ‘Active Cyber Defence’ Initiative Boasts Impressive First-Year Results
More than one million security scans and seven million security tests carried out on public sector websites
API Security Concerns Are on the Rise
More than two-thirds (69%) of organizations are exposing APIs to the public and their partners.
Fraudulent Money Transfers Cost Orgs $352K on Average
Incidents quadrupled in 2017, with losses ranging from a few thousand dollars up to $3 million.
Just 20% of Orgs Have Breach Notification Plans
The majority (73%) said they were “somewhat prepared” and would have to figure things out “on the fly.”
Over 500,000 Windows Machines Infected with Monero Mining Software
Crypto-mining malware spreading via EternalBlue exploit
Bomgar Acquires Lieberman Software Adding Privilege to Access
Bomgar has acquired Lieberman Software to enhance its portfolio of secure access software
JenX Botnet Emerges to Target IoT Devices and Grand Theft Auto
The botnet is for rent. Its service description reads: “God’s wrath will be employed against the IP that you provide us.”
Critical Infrastructure More Vulnerable Than Ever Before
The number of internet-accessible industrial control systems (ICS) is increasing every year, as are vulnerabilities.
Criminals Move to Cash in on Cryptocurrency Gold Rush
Cybercriminals have developed several schemes to defraud those looking to profit from the growth in cryptocurrencies.
Cisco: Crypto-Mining Botnets Could Make $100m Annually
Black hats are eschewing ransomware in favor of easier ways to make cash
US Government in Whois GDPR Warning
NTIA wants info to remain freely accessible despite new European privacy laws
Fortune 500 Staff Spill 2.7 Million Log-Ins to Dark Web
Leaked usernames and passwords for online accounts represent a growing security risk
