Infosecurity News
Majority of Global Orgs Lack Security Best Practices
For instance, four out of five companies don’t know where their sensitive data is located, or how to secure it.
Iranian Espionage Campaign Hinges on Beautiful (But Fake) Woman
A well-established collection of fake social media profiles for 'Mia Ash' build trust and rapport with potential victims.
Microsoft Turns Up $250,000 Bug Bounty for Windows
The program will pay out for remote code execution, elevation of privilege, or design flaws that compromise privacy or security.
#BHUSA: Panel – Fad or Future? Getting Past the Bug Bounty Hype
At Black Hat 2017 a panel of experts gathered to discuss the concept of bug bounty programs and share their experiences with running these within their respective companies
#BHUSA: Ransomware Profits Worth More than $25 Million (At Least)
Researchers say 2016 was "turning point" for ransomware and a year in which it became a multi-million dollar business
Google Uncovers Highly Targeted Spyware "Lipizzan"
Israeli firm pegged for developing tool, possibly for state use
Consumers Don't Trust Governments to Protect Data or Fight Cybercrime
Venafi study says majority disagree with encryption backdoors
#BHUSA: Phishing Psychology: Why Training Fails & Attacks Prevail
Karla Burnett, security engineer at Stripe, explored ‘phishing as a science’, shining a light on the psychology of phishing and why attacks continue to be successful
#BHUSA: Infosec Community Not Yet Reached Full Potential, Says Facebook CSO
A focus on better defense and diversity key to a safer, more secure future
DDoS Attacks Could Disrupt Brexit Negotiations
DDoS could disrupt the negotiations themselves, or act as camouflage for the theft of confidential documents.
Unicredit Reveals Double Breaches Affecting 400,000 Users
Around 400,000 Italian bank accounts have been accessed in one of Europe’s largest data breaches.
Report: North Korean Cyber Attacks Launched from Other Countries
India and China prime candidates, according to Recorded Future
Software Libraries Account for Just 7% of App Vulns
The average application contains 26.7 custom code vulnerabilities, vs. just two CVEs in library code.
Turkish Android App Store 100% Flush with Malware
At CepKutusu, every single app delivered malicious banking code.
Russia Passes Bill Banning Tor, VPNs
The bill now goes to President Vladimir Putin to be signed into the law.
British Man Confesses to Deutsche Telekom Mirai Attack
"Daniel K" faces up to a decade in jail
CopyKittens: Report Details Possible Iranian Threat Group
Cyber espionage group uses in-house and commercial tools to target wide range of victims
Wells Fargo Asks Judges to Force Return of Leaked Client Data
Bank’s lawyer accidentally sent data on tens of thousands of clients to opposition lawyer
New Form of Cyber-Attack Targets Energy Sector
The approach has the potential to cause power cuts, disrupt vital facilities and even cost lives.
Russian Underground Launches Online Courses in Card Fraud
Credit-card fraud gangs, which are cashing in on $24 billion a year, are now offering online e-learning courses for would-be criminals.
