Infosecurity News
GitLab Vulns Could Lead to Session Hijacking
The vulnerability stems from the type of session tokens used by GitLab.
MacEwan University Defrauded Out of $11.8mn in Phishing Attack
Staff fell for a business email compromise gambit after receiving a request to change banking info for a vendor.
Juniper to Acquire Cyphort
Juniper will use the buy to shore up its own cyber-portfolio—including its virtualized security offerings.
Foreign Firms Should Fear New Chinese Cyber-Law: Report
Source code reviews could generate exploits for Chinese spies
Nottinghamshire County Council Exposes Elderly, Disabled PII for 5 Years
The council has been fined £70,000 by the Information Commissioner’s Office.
Cyber-squatters Target Luxury Brands from Fendi to Prada
These domains are often used in phishing and scams, including pay-per-click ads, for-profit survey sites and social media scams.
Ransomware Infections on Course to Top 2016 Figures
Symantec claims organizations are increasingly under threat
Half of Global Firms Failing on PCI Compliance
Verizon says key in-house skills are often missing
Locky Ransomware Rears its Head in Big August Campaigns
It's back with a second wave of new but related attacks that build on a variant uncovered in early August.
Jimmy Nukebot Explodes on the Scene, Transforming NeutrinoPOS
It’s no longer in the banking business. Rather, it’s designed to help bad actors do so much more.
Office 365 Campaign Attacks Companies from Within
Attackers target Microsoft Office 365 to harvest login credentials and attack from within an organization.
FDA Approves Firmware Fix for St Jude Pacemakers
Abbott Laboratories continues security update program
Two Million CeX Customer Accounts Breached
UK tech retailer says no financial info was exposed
WireX Botnet Enslaves Android Devices
Meanwhile, research from A10 Networks has found that 38% of orgs have suffered a botnet attack at least once.
Phishers Plumb the Depths of Hurricane Harvey's Floods
Don’t be afraid to donate—but do your homework first.
UK CNI Firms Risking Huge NIS Directive Fines: Corero
Over a third haven’t met government security standards
Banner Day for Botnets: 1,700 IoT Credentials Leaked
There are just 144 unique username-password combinations used across 8,233 hosts, mostly default settings.
Mayweather-McGregor Match Draws Millions to Illegal, Pirated Streams
Almost 3 million tuned into streams that illegally redistributed the match.
Forcepoint Acquires RedOwl for Analytics
RedOwl is focused on helping customers understand and manage human risk.
SAP POS Flaw Allows Hackers to Change Pricing
Anyone can go in and steal payment card data or, in a new cybercrime wrinkle, change prices on merchandise.
