Infosecurity News

World’s Largest Bitcoin Exchange Bitfinex Crippled by DDoS
Attack has rendered IOTA deposits unavailable

Thai Police Bust Major Click Farm, Arresting Three
Chinese men allegedly paid by company back home to game system

UCL Hit by Major Ransomware Attack
Shared files remain read only after critical threat bypasses security filters

Slew of WiMAX Routers Open to Hijacking, Spying and Botnet Enslavement
An attacker can change the password of the admin user and wreak a range of havoc from there.

Phishing and Ransomware Awareness Unidentified by UK
Only 42% of UK respondents knew what ransomware was and only 17% could identify a phishing attack

Security and Development Teams Collaborate on Apps
DevOps is bringing disparate functions together, according to Veracode

UK and France Warn of Social Media Fines for Terror Content
Two countries look to put the pressure on tech firms

Microsoft Extends Patch Tuesday to Outdated Platforms
Redmond warns of more WannaCry-style attacks

Samba Exploit Spreads Bitcoin Miners
The exploit incorporates advanced functionality that was barely released in the Metasploit framework a week ago.

76% of Ransomware Attacks Strike Via Email
Phishing – and particularly spear phishing – has become a lucrative art.

Cloud Services in GDPR Compliance Fail
Netskope reveals problems with encryption, data sovereignty and more

ICO Fines Gloucester Council £100K After Heartbleed Snafu
Outsourcer failed to fix problem, resulting in data stealing attack

Spyware- and Ransomware-as-a-Service Target Macs
Both have been purpose-built to appeal to bad actors lacking in technical expertise.

Industroyer Malware Detected, Linked to Kiev Attack
Malware which has the ability to take down a city's electrical and power grid has been detected

Virgin Media Patches New Super Hub Bug
Vulnerability could give hackers full remote access to users’ internet traffic

Cisco VNI: DDoS Attacks to Increase 2.5-Fold By 2021
The average DDoS attack size is approaching 1.2Gbps—enough to take most organizations completely offline.

FIN7 Chomps Into Restaurants with Undetectable, Fileless Attack
Hackers can seize system control and install a backdoor to steal financial information at will.

#Infosec17 Bored Staff the Biggest Cause of Human Error at Work
Centrify poll reveals challenges in securing the modern workplace

Zusy Malware Spreading via PPTs, No Clicking Required
The malware that executes when the user “mouses over” a link—no clicking or macros required.

#Infosec17: (ISC)2 Declare GDPR "a Business Opportunity" and "Marketing Advantage"
Adrian Davis, managing director (ISC)2 EMEA declared GDPR a “huge business opportunity, not a compliance thing.”



