Infosecurity News

Microsoft Issues Out-of-Band Security Update
Malware Protection Engine fix released for eight RCE and DoS vulnerabilities

#EuroCACS Top 10 Cyber Risks Detailed
Malware, DDoS attacks and human behavior remain among the top cyber-risks.

Molina Health Exposes Scores of Patient Records to Open Internet
Countless patient medical claims were available online without requiring any authentication.

German Threat Actor Spreads Houdini Worm on Pastebin
This individual is also actively editing an open source ransomware variant called MoWare H.F.D.

Cloud Environments Suffer Widespread Lack of Security Best Practices
Organizations fail 55% of compliance checks established by the Center for Internet Security (CIS).

Shades of #WannaCry as Urgent Patch Issued for SMB Software Samba
Threat could spread far and fast, warn experts

UK IT Leaders: GDPR Will Drive Up Prices for Customers
Varonis study finds new law not a priority for nearly half of firms

Digital Ad Bot Fraud Set to Reach $6.5 Billion
Machines are getting better at apeing human traffic

Subtitle Attack Threatens Millions of Smart TVs, Mobiles and PCs
International and foreign-language film fans beware: Check Point researchers have uncovered a new attack vector that uses malicious subtitles to infect devices via their media players.

Cloak and Dagger Android Vulnerability is Supremely Dangerous
Cloak and Dagger is the malicious combination of two legitimate permissions.

GDPR - Companies Unprepared, Don't Know Where Data Is
Companies don’t understand how to search data, as regulators predicted to issue fines for ‘second awakening’ of GDPR

Target in Record $18.5m Settlement with States
Breach costs continue but pale in comparison to profits

Symantec Claims Further Lazarus Links but Critics Disagree
Thinktank points out too many inconsistencies

Enisa Urges Creation of IoT “Trust Label”
Latest report suggests new regulations to establish baseline security standards

Irish Police Recover 900,000 Euros in VAT Fraud Case
Nearly a million Euros have been recovered after Irish police arrested two in a sophisticated online fraud sting.

Data-Wiping Malware Takes Aim at IoT Devices
Hackers are adding data-wiping routines to some of the malware designed to infect IoT and embedded devices.

2017 Has Already Racked Up 1,200 Breaches--On Pace for Worst Year Ever
A massive 3.4 billion records have been exposed already.

#WannaCry Profits Finally Hit $100,000
Not a great ROI for the black hats behind infamous ransomware

Breaches Set to Grow in 2018 but Security Investments Stall
FICO poll finds UK firms lagging on breach response plans

C-Level Represents Biggest Mobile Security Risk
Latest iPass study finds IT leaders are increasingly concerned



