Infosecurity News

Security Boost as Google Makes Certificate Transparency Mandatory
CT is designed to help prevent abuse of SSL cert system

45% of Consumers Are Victims of Cybercrime
The most common type of attack that consumers fall victim to are false requests to reset social media account passwords.

Dyn: IoT-Based DDoS Launched by Just 100K Endpoints
Retry activity from legitimate servers complicated the attack

Over 80% of Employees Lack Security/Privacy Awareness – Report
MediaPro claims bad practice is endemic in the US

AT&T Secret For-Profit Spy Program Rakes in Millions
Project Hemisphere gives law enforcement access to trillions of call records and other customer metadata, such as location.

Nuclear Plants at Big Risk from Leaking Pagers
Attacks could include industrial espionage or a fatal sabotage of public service systems in a terrorist attack.

MedSec Cardiac Device Hack Claims Bolstered by Third Party
Report from hired consultancy used in St Jude Medical court case

CloudFanta Malware Uses Popular Online Storage App to Infect Users
Its use of SugarSync demonstrates the effective use of cloud services for hosting malware by malicious threat actors.

Russian Hacker Indicted for LinkedIn, Dropbox Breaches
Yevgeniy Nikulin is currently under arrest in Prague

75% of Orgs Lack Cybersecurity Expertise
66% of respondents faced increased security risks due to this workforce shortage.

US Defense Department Launches Twin Bug Bounty Programs
The Crowdsourced Security Initiative will be a full-scale launch following the successful Hack the Pentagon pilot program.

Massive DDoS Attack Knocks Out Twitter, Box, Spotify
The DDoS attack targeted New Hampshire-based company Dyn and its managed DNS infrastructure.

US Secret Service Under Fire Over Security Failings
USSS IT set-up lacks leadership, audit claims

Trend Micro Launches XGen For Multi-Layered Endpoint Protection
New approach features 'high fidelity' machine learning for extra accuracy

Google Awards $100K Security Grant to University of California Team
The Shellphish team is the same team that won bronze at the DARPA-sponsored Cyber Grand Challenge over the summer.

Apple iOS Devices: Leakier Than Android
Millions of Apple iOS mobile devices are leaking information like the exact location of devices and their owners.

Fancy Bear Spying Targets 1000s, Including NATO, Political Leaders
The Kremlin-tied group has created legions of custom programs, backdoors, bootkits and rootkits to assist it in its spying.

Trump’s Turn to Face Questions Over Poor Email Security
Republican candidate’s corporate servers are wide open, says researchers

Routers Branded 'Achilles Heel' of Home and Small Biz Security
Eset research finds numerous vulnerabilities

Researchers Find Dangerous Intel Chip Flaw
Side channel issue may increase potency of cyberattacks



