Infosecurity News
#Infosec17: Botnets & Their DDoS Attacks Are Our Collective Problem
DDoS attacks are all too commonly thought of as “someone else’s” problem, but botnets are all too easily formed
More Payloads Appear for EternalBlue NSA Weapon
It is likely that we will see yet more additional payloads for the tool.
DoD Files Found on Publicly Accessible Amazon Server
Booz Allen Hamilton blames human error
IDC: Most Orgs Mount Ineffective Security Investigations
Firms experience an average of 40 actionable incidents per week, but only a quarter (27%) think they are coping.
Kmart Point of Sale Hacked with 'Undetectable' Malware
In Kmart's second breach in three years, chip-and-PIN card readers significantly contained the fallout.
250K Photos Leaked in Cosmetic Surgery Extortion Attack
The Fancy Bear/APT28 hacking group, using the nickname "Tsar Team,” is behind the attack, according to reports.
Fireball Malware Infects 20% of Corporate Networks Worldwide
Fireball is adware, and can be turned into a fully functioning malware downloader.
OneLogin Reports Unauthorized Access, User Data Compromised
Identity management and Single Sign-On vendor OneLogin has reported an unauthorized access issue, which may have compromised customer data.
UK Healthcare Accounts for 43% of all Breaches
The British healthcare system experienced 2447 incidents and accounted for 43% of all reported incidents between January 2014 and December 2016
Gmail Embraces Machine Learning
Early phishing detection, click-time warnings for malicious links and unintended external reply warnings are all new.
IT and Biz Leaders: Boards Don’t Take Security Seriously
Control Risks says IT teams need to communicate better with C-level
Android Auto-Click Adware “Judy” May Have Hit 36 Million
Google was forced to remove over 40 apps from Play store
NATO Cyber-Defense Group Adds New Nations to Its Ranks
NATO CCD COE has added two new member states, and two more will soon follow.
8,000 Vulnerabilities Found in Pacemakers
All of the programmers that White Scope examined had outdated software with known vulnerabilities. Many of them run Windows XP.
Fancy Bear US Election Hackers Doctored Leaked Documents
The Russian hackers behind the break-in at the DNC have been caught inserting fake information into stolen documents.
Microsoft Issues Out-of-Band Security Update
Malware Protection Engine fix released for eight RCE and DoS vulnerabilities
#EuroCACS Top 10 Cyber Risks Detailed
Malware, DDoS attacks and human behavior remain among the top cyber-risks.
Molina Health Exposes Scores of Patient Records to Open Internet
Countless patient medical claims were available online without requiring any authentication.
German Threat Actor Spreads Houdini Worm on Pastebin
This individual is also actively editing an open source ransomware variant called MoWare H.F.D.
Cloud Environments Suffer Widespread Lack of Security Best Practices
Organizations fail 55% of compliance checks established by the Center for Internet Security (CIS).
