Infosecurity News
Many Patched Macs Still Vulnerable Via EFI Issues
Firmware in many models hasn’t been receiving security updates
Governments' Google Data Requests Hit All-Time High
Firm forced to revise up many FISA demands from previous years
Uber London Ban Sees Rise in Malicious Taxi Apps
RiskID spots fake apps serving adware and linking to known bad sites
ICANN Postpones Major Internet Security Update
KSK rollover could kick 750m internet users offline
ISF Offers GDPR Implementation Roadmap
The guide offers best practices for guiding a compliance program.
One-Fifth of IoT Device Owners Unaware of Mirai
Also, more than one-third (35%) of IoT device owners do not change the default password on their devices.
Dark Web Drug Suspect Cuffed On Way to Beard Contest
Suspect linked to “OxyMonster” admin on Dream Market site
Norway Joins Global Cyber-Defense Hub
The Nordic country joins 20 other NATO allies in the research hub.
Sonic Drive-In Hit By Breach, Millions of Cards Potentially Affected
The stolen cards are part of a cache of five million accounts put up for sale on the Dark Web in mid-September.
Phishing Remains Top Cyberattack Vector in 2017
Employees are most often victims of spoofing and impersonation (67%).
Volumetric Attacks and the IoT Dominate DDoS Scene
Also, 75% of attacks employed blended, multi-vector approaches in Q2.
Federal Employees Overwhelmingly Support NIST CSF Mandate
Trump's mandate for agencies to adopt the Obama-era Cybersecurity Framework is a hit among federal workers.
Police: Buying Fake Goods Online Can Lead to ID Theft
City of London Police says over 4,000 sites were created using stolen IDs
#ISC2Congress: FBI Calls for a Rational Non-Emotional Approach to Risk and Security
The information security industry needs to adopt rational models rather than emotional ones for risk management, according to the Deputy Assistant Director of the FBI, Donald Freese.
BankBot Resurfaces in Google Play with New Tricks
It calls itself Jewels Star Classic—in an effort to be conflated with a legitimate mobile game called simply Jewels Star.
Deloitte Hack Exposes Confidential Email for World's Largest Companies—Report
The attackers hit the global email server via a hacked administrator account lacking two-factor authentication.
Over a Quarter of UK Councils Hit by Ransomware
The good news is that local authorities are backing up, not paying up
Verizon Hit by Another Amazon S3 Leak
Engineer-owned bucked containing data marked ‘confidential’ exposed
Massive Wave of Ransom DDoS Threats Sweeps Globe
A group calling themselves the Phantom Squad is threatening thousands of companies with DDoS if they don’t pay a ransom.
Apple Safari Privacy Cookie Features Praised
Apple’s move to add Intelligent Tracking Protection and close loopholes around third-party cookie-blocking in Safari has been praised by privacy advocates
