Infosecurity News

Oracle Admins Faced with 270 Fixes this Quarter
Another big ask as E-Business Suite accounts for nearly half

(ISC)² Names SANS Vet as North American Director
Brian Correia will be director of business development for the North America region, a new position.

Consumers Hold Businesses, Not Themselves, Responsible for Data Breaches
Overall, respondents said that 70% of the responsibility for protecting and securing customer data lies with companies.

30% of NHS Trusts Hit by Ransomware
Outdated AV software significant problem when it comes to protecting patient records from malware

Dutch Cops Warn 20,000 of Email Account Hack
Webmaster allegedly hoovered up log-ins from sites he designed

More Cybercrime Than Physical Crime in North Wales
Police bosses warn businesses of shifting trend

McDonald's Website Flaws were Disclosed During Christmas
A cross-site scripting flaw in McDonald’s website could allow an attacker to steal and decrypt a password from a registered user.

Google Key Transparency Tries to Succeed Where PGP Failed
Launches open source, generic and interoperable directory of public keys

Cyber-Attack Forces Barts Health Systems Offline
Ransomware ruled out by UK’s largest NHS Trust

Enisa Report Looks to Boost Smart Car Security
EU agency looks to support manufacturers and other stakeholders

Routine Police Smartphone Downloads Raise Privacy and Security Fears
Poorly trained cops leave data downloads unencrypted and with no audit trail

GoDaddy Forced to Revoke 9000 SSL Certs
CA discovers five-month-old domain validation bug

Adaptive Authentication on the Rise as 2FA Fervor Wanes
Those who use two-factor authentication (2FA) admit that they receive complaints about it from their users.

Peace Sign Pics Could Give Hackers Your Fingerprints
Japanese researchers raise biometric security fears

Ukraine Power Outage Confirmed as Cyber Attack
Experts finger same culprit as December 2015 attack

ISACA Issues NIST Cybersecurity Framework Audit
The audit program, based on the NIST Cybersecurity Framework, provides direction on cyber-governance.

Insurer Fined by ICO Over Data Loss and Encryption Failing
Royal and Sun Alliance (RSA) has been fined £150,000 by the Information Commissioner’s Office following the loss of personal information relating to 59,592 customers

St Jude Medical Updates Cardiac Devices but Flaws Persist
Move seems to validate last year’s report on widespread bugs but doesn’t fix larger problems

Merry Christmas Ransomware Hangs Around in the New Year
The ransom note features Robot Santa Claus from the TV show Futurama.

Parliament Inquiry to Tackle Growing Cyber Threat
Joint Committee asks experts to pen written submissions



