Infosecurity News

Cyberbit Range Offers Simulated Attack Training
The Cyberbit Range provides lifelike simulation for security operations trainees—kind of like the holodeck, in Star Trek.

Converse E-Commerce Site Hacked for Payment Info
The Australian online site for the iconic sneaker brand was compromised for more than a month.

Most Americans Believe a Tech-Enabled Terrorist Attack is Imminent
58% of participants under 30 believed that a technology-based terrorist threat was imminent.

IT Admins Urged to Patch Critical Industrial Control Flaw
Bug could allow hackers to physically control equipment

Security Boost as Google Makes Certificate Transparency Mandatory
CT is designed to help prevent abuse of SSL cert system

45% of Consumers Are Victims of Cybercrime
The most common type of attack that consumers fall victim to are false requests to reset social media account passwords.

Dyn: IoT-Based DDoS Launched by Just 100K Endpoints
Retry activity from legitimate servers complicated the attack

Over 80% of Employees Lack Security/Privacy Awareness – Report
MediaPro claims bad practice is endemic in the US

AT&T Secret For-Profit Spy Program Rakes in Millions
Project Hemisphere gives law enforcement access to trillions of call records and other customer metadata, such as location.

Nuclear Plants at Big Risk from Leaking Pagers
Attacks could include industrial espionage or a fatal sabotage of public service systems in a terrorist attack.

MedSec Cardiac Device Hack Claims Bolstered by Third Party
Report from hired consultancy used in St Jude Medical court case

CloudFanta Malware Uses Popular Online Storage App to Infect Users
Its use of SugarSync demonstrates the effective use of cloud services for hosting malware by malicious threat actors.

Russian Hacker Indicted for LinkedIn, Dropbox Breaches
Yevgeniy Nikulin is currently under arrest in Prague

75% of Orgs Lack Cybersecurity Expertise
66% of respondents faced increased security risks due to this workforce shortage.

US Defense Department Launches Twin Bug Bounty Programs
The Crowdsourced Security Initiative will be a full-scale launch following the successful Hack the Pentagon pilot program.

Massive DDoS Attack Knocks Out Twitter, Box, Spotify
The DDoS attack targeted New Hampshire-based company Dyn and its managed DNS infrastructure.

US Secret Service Under Fire Over Security Failings
USSS IT set-up lacks leadership, audit claims

Trend Micro Launches XGen For Multi-Layered Endpoint Protection
New approach features 'high fidelity' machine learning for extra accuracy

Google Awards $100K Security Grant to University of California Team
The Shellphish team is the same team that won bronze at the DARPA-sponsored Cyber Grand Challenge over the summer.

Apple iOS Devices: Leakier Than Android
Millions of Apple iOS mobile devices are leaking information like the exact location of devices and their owners.



