Infosecurity News
Accenture: Utility Grids Brace for Cyberattacks—with Poor Defenses
Most utilities expect an attack soon but smart-grid initiatives bring up even bigger fears.
Equifax Awarded $7m IRS Fraud Prevention Contract
Breached firm tasked with protecting US taxpayers
Banking Trojan Exploits Chain of Trust to Deceive Security Tools
It exploits an authentic VMware binary to deceive security tools into accepting errant activity.
Pulse-Wave DDoS Attacks Mark a New Tactic in Q2
It’s called such due to the traffic pattern it generates—a rapid succession of attack bursts that split a botnet’s attack output.
Many Patched Macs Still Vulnerable Via EFI Issues
Firmware in many models hasn’t been receiving security updates
Governments' Google Data Requests Hit All-Time High
Firm forced to revise up many FISA demands from previous years
Uber London Ban Sees Rise in Malicious Taxi Apps
RiskID spots fake apps serving adware and linking to known bad sites
ICANN Postpones Major Internet Security Update
KSK rollover could kick 750m internet users offline
ISF Offers GDPR Implementation Roadmap
The guide offers best practices for guiding a compliance program.
One-Fifth of IoT Device Owners Unaware of Mirai
Also, more than one-third (35%) of IoT device owners do not change the default password on their devices.
Dark Web Drug Suspect Cuffed On Way to Beard Contest
Suspect linked to “OxyMonster” admin on Dream Market site
Norway Joins Global Cyber-Defense Hub
The Nordic country joins 20 other NATO allies in the research hub.
Sonic Drive-In Hit By Breach, Millions of Cards Potentially Affected
The stolen cards are part of a cache of five million accounts put up for sale on the Dark Web in mid-September.
Phishing Remains Top Cyberattack Vector in 2017
Employees are most often victims of spoofing and impersonation (67%).
Volumetric Attacks and the IoT Dominate DDoS Scene
Also, 75% of attacks employed blended, multi-vector approaches in Q2.
Federal Employees Overwhelmingly Support NIST CSF Mandate
Trump's mandate for agencies to adopt the Obama-era Cybersecurity Framework is a hit among federal workers.
Police: Buying Fake Goods Online Can Lead to ID Theft
City of London Police says over 4,000 sites were created using stolen IDs
#ISC2Congress: FBI Calls for a Rational Non-Emotional Approach to Risk and Security
The information security industry needs to adopt rational models rather than emotional ones for risk management, according to the Deputy Assistant Director of the FBI, Donald Freese.
BankBot Resurfaces in Google Play with New Tricks
It calls itself Jewels Star Classic—in an effort to be conflated with a legitimate mobile game called simply Jewels Star.
Deloitte Hack Exposes Confidential Email for World's Largest Companies—Report
The attackers hit the global email server via a hacked administrator account lacking two-factor authentication.
