Infosecurity News

OneLogin Reports Unauthorized Access, User Data Compromised
Identity management and Single Sign-On vendor OneLogin has reported an unauthorized access issue, which may have compromised customer data.

UK Healthcare Accounts for 43% of all Breaches
The British healthcare system experienced 2447 incidents and accounted for 43% of all reported incidents between January 2014 and December 2016

Gmail Embraces Machine Learning
Early phishing detection, click-time warnings for malicious links and unintended external reply warnings are all new.

IT and Biz Leaders: Boards Don’t Take Security Seriously
Control Risks says IT teams need to communicate better with C-level

Android Auto-Click Adware “Judy” May Have Hit 36 Million
Google was forced to remove over 40 apps from Play store

NATO Cyber-Defense Group Adds New Nations to Its Ranks
NATO CCD COE has added two new member states, and two more will soon follow.

8,000 Vulnerabilities Found in Pacemakers
All of the programmers that White Scope examined had outdated software with known vulnerabilities. Many of them run Windows XP.

Fancy Bear US Election Hackers Doctored Leaked Documents
The Russian hackers behind the break-in at the DNC have been caught inserting fake information into stolen documents.

Microsoft Issues Out-of-Band Security Update
Malware Protection Engine fix released for eight RCE and DoS vulnerabilities

#EuroCACS Top 10 Cyber Risks Detailed
Malware, DDoS attacks and human behavior remain among the top cyber-risks.

Molina Health Exposes Scores of Patient Records to Open Internet
Countless patient medical claims were available online without requiring any authentication.

German Threat Actor Spreads Houdini Worm on Pastebin
This individual is also actively editing an open source ransomware variant called MoWare H.F.D.

Cloud Environments Suffer Widespread Lack of Security Best Practices
Organizations fail 55% of compliance checks established by the Center for Internet Security (CIS).

Shades of #WannaCry as Urgent Patch Issued for SMB Software Samba
Threat could spread far and fast, warn experts

UK IT Leaders: GDPR Will Drive Up Prices for Customers
Varonis study finds new law not a priority for nearly half of firms

Digital Ad Bot Fraud Set to Reach $6.5 Billion
Machines are getting better at apeing human traffic

Subtitle Attack Threatens Millions of Smart TVs, Mobiles and PCs
International and foreign-language film fans beware: Check Point researchers have uncovered a new attack vector that uses malicious subtitles to infect devices via their media players.

Cloak and Dagger Android Vulnerability is Supremely Dangerous
Cloak and Dagger is the malicious combination of two legitimate permissions.

GDPR - Companies Unprepared, Don't Know Where Data Is
Companies don’t understand how to search data, as regulators predicted to issue fines for ‘second awakening’ of GDPR

Target in Record $18.5m Settlement with States
Breach costs continue but pale in comparison to profits



