Infosecurity News

Samba Exploit Spreads Bitcoin Miners
The exploit incorporates advanced functionality that was barely released in the Metasploit framework a week ago.

76% of Ransomware Attacks Strike Via Email
Phishing – and particularly spear phishing – has become a lucrative art.

Cloud Services in GDPR Compliance Fail
Netskope reveals problems with encryption, data sovereignty and more

ICO Fines Gloucester Council £100K After Heartbleed Snafu
Outsourcer failed to fix problem, resulting in data stealing attack

Spyware- and Ransomware-as-a-Service Target Macs
Both have been purpose-built to appeal to bad actors lacking in technical expertise.

Industroyer Malware Detected, Linked to Kiev Attack
Malware which has the ability to take down a city's electrical and power grid has been detected

Virgin Media Patches New Super Hub Bug
Vulnerability could give hackers full remote access to users’ internet traffic

Cisco VNI: DDoS Attacks to Increase 2.5-Fold By 2021
The average DDoS attack size is approaching 1.2Gbps—enough to take most organizations completely offline.

FIN7 Chomps Into Restaurants with Undetectable, Fileless Attack
Hackers can seize system control and install a backdoor to steal financial information at will.

#Infosec17 Bored Staff the Biggest Cause of Human Error at Work
Centrify poll reveals challenges in securing the modern workplace

Zusy Malware Spreading via PPTs, No Clicking Required
The malware that executes when the user “mouses over” a link—no clicking or macros required.

#Infosec17: (ISC)2 Declare GDPR "a Business Opportunity" and "Marketing Advantage"
Adrian Davis, managing director (ISC)2 EMEA declared GDPR a “huge business opportunity, not a compliance thing.”

#Infosec17 Coe: Relationship Building is Key to Managing Risk
IAAF chairman says breached firms could benefit from being more transparent

#Infosec17: GDPR Compliance: Carrot is Better Than the Stick, Says ICO STO
Opportunity GDPR compliance affords from a data protection standpoint could inspire companies more than the threat of fines

#Infosec17 Dangers and Dependencies of Open Source Modules Detailed
Open source modules can contain major security problems, and are often relied upon by thousands of dependents.

Healthcare the Top-Targeted Vertical for Cybercrime
Reconnaissance, lateral movement and exfiltration detections have all increased by more than 265%.

North American, Global Workforce Gap to Hit 1.8m by 2022
A full 68% of cyber-workers in North America believe the workforce shortage is due to a lack of qualified personnel.

#Infosec17 Blockchain Could Be Next 'Cybersecurity Frontier' by 2025
KPN CISO argues there’s much work to be done before then

#Infosec17: Paxman Talks Trust at Infosecurity Europe
Veteran broadcaster dubious about Russian election hacking allegations

#INFOSEC17 Malwarebytes: WannaCry was Amateur Attackers Using Sophisticated Exploit
The WannaCry ransomware was ‘amateur’, but using a sophisticated exploit was the reason for its success.



