Infosecurity News

Mastercard Accelerates Death of Passwords with Selfie Pay Roll-Out
Card giant’s Identity Check Mobile tech should make secure authentication easier

Brand-New Delphi Trojan Exfiltrates Vast Amounts of Info
It searches and extracts cookies and authentication credentials, and scavenges info saved by Point of Sale (PoS) systems.

Microsoft Unveils Security Policy Doc for Lawmakers
Redmond seeks to influence governments for ‘the good of the cloud’

SANS Institute in IoT Botnet Warning
Honeypot set-up sees DVR successfully attacked several times an hour

Real-Time Phishing Emerges in Brazil
This tactic is designed to extract critical data from its victims in real time via a live, interactive phishing attack.

Researchers Crack MarsJoke Crypto to Defang Ransomware
Kaspersky has made a free decryptor available.

Donald Trump Vows 'Crippling Counter-Cyberattacks'
Citing Russia as a major concern, the tack is a direction change from what he said during the debate against Clinton.

IoT DDoS Attack Warning as Mirai Malware Leaked
Malware helped attackers launch massive campaign against Krebs

ICO: Firms Must Follow GDPR Pre Brexit
New commissioner adds that ‘personal info will need to flow’ whatever happens

Popular Boxing Site Punches Visitors with Banking Malware
The injected code employs several evasion tactics, including not executing without significant user interaction.

UK Gov Boosts Security with HTTPS and DMARC
Protocols will be mandatory from 1 October

NHS Cloud App Blind Spot Could Put Data at Risk
FoI request finds many Trusts have lack of visibility into their environments

Tofsee Botnet Gets Aggressive with Russian Dating
Spam email campaigns containing malicious attachments are spreading the Tofsee malware and botnet at unprecedented aggression levels.

83% of Companies Have Released Applications They Know Are Unsafe
Survey shows companies are over-reliant on bug bounties.

Web Host Hit by DDoS of Over 1Tbps
Largest ever blitz made possible by giant IoT botnet

DarkOverlord Extorts WestPark Capital for Ransom
The group threatens to release NDAs, contracts, internal reports and other sensitive data belonging to the investment firm.

Virlock Ransomware Spreads User-to-User for Massive Viral Infection
Virlock ransomware has hit the scene, with the brand-new capability of infecting every file it comes into contact with.

Google Launches All-Out War on XSS
New tools designed to help developers confound popular attacks

GozNym Frankenstein Trojan Has Four Faces
Talos identified several spear phishing campaigns which are used to distribute the GozNym malware.

Malvertising Attack Threatens 2 Million answers.com Visitors Daily
The attack is making use of the RIG exploit kit to drop the CrypMIC ransomware.



