Infosecurity News

CBI Warns of Brexit "Data Cliff Edge"
Business group says UK firms urgently need transitional deal

Microsoft Patches 'BlueBorne' Bluetooth Bug in Latest Update
Patch Tuesday Fixes 27 Critical Vulnerabilities

Bashware Flaw threatens 400M PCs Globally
A newly discovered vulnerability can enable any malware to bypass all security solutions on Windows 10 machines.

Crackas With Attitude Player Jailed for Five Years
Liverman helped target former CIA boss and director of national intelligence

FA Ramps Up Cybersecurity Ahead of Russia 2018
Next FIFA Wold Cup raises hacking fears

Spanish Data Privacy Regulator Fines Facebook $1.5mn
The social network is fined for collecting information on user habits for advertising without their explicit consent.

Xafecopy Android Malware Empties Bank Accounts
It can open web pages that have WAP billing and click buttons that initiate payments, all while the user suspects nothing.

Android Toast Flaw Can Burn Users with Malware, DoS and Info-Theft
The flaw can be used to more easily enable an “overlay attack.”

Alert Over Bugs in Medfusion Syringe Pumps
ICS-CERT releases mitigation advice

MongoDB Ransom Victims Had No Account Passwords
Database provider tries to improve customers’ security awareness

Equifax Breach, Affecting 45% of US Population, Raises Big Questions
Questions abound as to the company’s governance and stewardship of citizen data.

Bug Exposed .UK Domains to Hijacking Risk for Months
Registrar Enom has now fixed the issue

Equifax Reports 143 Million Records Breached
US-based credit monitoring service Equifax has reported a data breach of 143 million records.

Mexican VAT Refund Giant Exposes Half-Million Passports, Credit Cards Online
MoneyBack left a misconfigured database open, with passport info, credit card numbers, travel tickets and other credentials.

SMBs Largely Unprepared for IoT, Ransomware Attacks
Nearly half of them would pay a ransom on connected things to reclaim their data.

Dragonfly 2.0 Attackers Probe Energy Sector
Determined group may already have access to operational systems, warns Symantec

Lenovo Slapped with $3.5M Fine over Superfish
32 states have won a multimillion dollar settlement to resolve violations of state consumer protection laws.

Apache Struts Vulns Threatens Fortune 500 Data
A critical remote code execution vulnerability has been found in the popular open-source framework, threatening corporate data.

Enterprises Struggle to Contain “Information Security Debt”
451 Research claims consolidation must focus on data and risk-centric approaches

MongoDB Customers Held to Ransom Again
Over 75,000 victims and counting



