Infosecurity News

Tinder Flaws Let Stalkers Watch Your Every Move
Attackers can also take control of profile pictures.

NCSC: UK Facing Category One Cyber-Attack
Major attack could disrupt critical infrastructure before the decade is out

The $6bn Crime: 17 Million UK Consumers Hit Last Year
Globally, hackers stolen $172bn, says Norton

UK’s Top Law Firms at Risk After 1m+ Credentials Found on Dark Web
Spear-phishing, CEO fraud and data theft could follow, says RepKnight

14 Flaws in Popular Software Are Putting ICS at Risk
License management USB tokens can be used to open a hidden remote-access channel for cyber-attackers.

Global Levels of Fraud Reached an All-Time High in 2017
About 84% of companies surveyed worldwide experienced a fraud incident in 2017, according to the Kroll Annual Global Fraud & Risk Report.

Fictional SpriteCoin Cryptocurrency Packs a Ransomware Punch
The malware attempts to trick victims by masquerading as a password-protected storage mechanism for a new cryptocurrency.

UK 'Most Well-Prepared' European Nation for GDPR
Study finds UK well ahead of other European nations, but legal experts err on side of caution

Army Boss Warns UK Falling Behind Russia on Cyber
More investment needed, says Nick Carter

Russian Bots Call for Release of FISA Memo
Republican lawmakers follow suit, despite voting to reauthorize surveillance law

Half of Norway’s Population May Have Been Breached
Healthcare provider hit by major intrusion

Smartphone Maker OnePlus Hit with Credit Card Breach Affecting Tens of Thousands
A malicious script was injected into the payment page code to sniff out credit card info while it was being entered on the website.

In a Twist, Dridex Campaign Uses FTP Sites
The attack downloads malicious documents from compromised FTP sites instead of the more usual malicious web links.

Most IT Execs Have Zero Control Over Password Hygiene
More than half of IT executives in a recent survey said they rely solely on employees to monitor their own password behavior.

One Identity Acquires Balabit to Merge IAM and PAM
Identity and access management provider One Identity has acquired privileged access management vendor Balabit

Report Details 100+ Domains at Risk from IDN-Related Spoofing
Farsight Security highlights continuing challenge to combat phishing

Serial DDoS-er Pleads Guilty to Two Year Spree
Former electronics store employee bought DDoS-for-hire services

UK Man Sentenced for Tweeting Personal Data
Details included name and health details of “vulnerable adult”

Russia, China's Cyber-Capabilities Are Catastrophic
Both have the capability to launch kinetic and cyber-attacks that cause complete paralysis and/or destruction of critical systems and infrastructure.

MailChimp Found Leaking Email Addresses
If you visited a link from a MailChimp newsletter, your email address and your reading habits may have been broadcast to a site owner.



