Infosecurity News
Microsoft Issues Warning for Meltdown Fix
Out-of-band update could cause BSOD for some
Fake Google Play Security Apps Harvest User Info
Google takes down 36 malware-laden apps
Android Trojan Targets 200+ Global Financial Apps
Banker A2f8a is designed for stealing login credentials, hijacking SMS messages and more.
Stealthy Crypto-Miners Are Slipping Into Web Ads
The trojanized ads attempt to con site visitors into clicking on a pop-up that would initiate a secret mining process.
Targeted Attacks on Industrial Sector Growing Rapidly
About 28% of the 962 industrial companies surveyed have faced targeted attacks in the last 12 months.
VMware Issues Critical VDP Update
Virtualization giant fixes three vulnerabilities
Major Chip Flaws Confirmed as “Meltdown” and “Spectre”
Impact of discoveries could be felt for years, claim researchers
DHS Admits Major Leak Affecting 247,000 Employees
Unauthorized data exfiltration may have hit many more
Android Malware Steals Uber Logins, Then Covers it Up
Malware uses deep link URI of Uber app to appear legitimate
Intel Flaw: Performance Degradation Bombshell or Massive Overstatement?
The patches needed to fix the issue could grind the cloud, via AWS and Azure, to a halt, some say.
LockPoS Takes a Page from Flokibot to Achieve Stealth
The malware is distributed from the same botnet used to distribute the Flokibot PoS.
Trackmageddon Lets Bad Actors Track Down Kids, Animals and More
Rogue parties can access real-time location data on devices ranging from smart dog collars to in-car navigation to kid-trackers.
Patching Takes More than a Fortnight for Many Firms
Ivanti research finds security gaps persist on the endpoint
Smart Speakers Could Expose Corporate Networks
Trend Micro research identifies more IoT headaches for admins
Iranian Netizens Flock to Tor After Web Crackdown
Government blocks services as violent protests continue
Ancestry.com Info Exposed by Leaky RootsWeb Server
A file containing email addresses/username and password combinations for Ancestry.com, as well as user names, has been exposed.
Huawei IoT Exploit Code Released for Free
The working code for the Mirai variant has been made free on Pastebin.
DMARC Adoption Surges Ahead of Federal Mandate
Federal domain adoption of the DMARC email security scheme in the US increased 38% in 30 days.
Crypto Start-Up CEO Resigns After $64m Loss
Hackers stole thousands of Bitcoin from NiceHash last month
Forever 21 Breach Lasted Over Seven Months
Many POS devices did not have encryption switched on
