Infosecurity News

Met Under Fire for Still Using XP on 27,000 PCs
London’s police force spending £1.65m on support

Instagram Accounts Hacked to Promote Adult Dating Spam
Symantec research finds profiles have been altered with sexually suggestive imagery to lure users to adult dating and porn spam

United Awards 19-Year-Old White Hat One Million Air Miles
Bug bounty scheme recipient gets to Vegas almost free-of-charge

Microsoft Targets the Desktop with Nine Security Bulletins
Redmond update round also highlights need to restrict privileges

Visual Hacking is Successful 91% of the Time
A white hat walking through the office scouting for information on desks and monitor screens was highly successful.

Google’s YOLO API Set to Speed Secure App Log-Ins
Latest project will make things easier for password manager users

Connected Cars Exposed: Half Have Potentially Serious Flaws
IOAtive study finds bugs in virtually every component

Jeep Hackers Demonstrate New, Terrifying Compromises
Hacks include acceleration, slamming the breaks on remotely and turning the vehicle’s steering wheel at any speed.

Hackable Thermostats Heat Up IoT Security
The most obvious danger is from home invaders who can gain easy access to the wake up and work schedule for an entire household.

Michael Phelps Targeted by Hackers After Winning 19th Gold Medal
New World Hackers has claimed responsibility for taking down the U.S. swimmer’s website.

Symantec Spots State-Sponsored ‘Strider’ Attacks
Group has only hit seven organizations in five years

#DefCon: Thermostat Control Hacked to Host Ransomware
Thermostat security has been proved to be particularly vulnerable, with ransomware able to infect and run on it.

#DefCon US Government Only Holds Dozens of Zero-Days
The US Government only holds “dozens” of vulnerabilities at any one time.

Researchers Hack Tesla S's Autopilot System
The white hats showed the potential to make surrounding objects “disappear” from the autopilot’s view.

Mayhem the Hacker-Bot Wins $2M DARPA Challenge
Mayhem was created by a Pittsburgh-based team known as ForAllSecure—one of seven teams that competed for nearly $4 million.

#BHUSA: Apple To Pay Bug Bounties
In the wake of its legal battle with the FBI over security vulnerabilities and access, Apple is launching its first-ever bug bounty program with potential payouts as large as USD$200,000.

#BHUSA Researchers Present Deep Sea Phishing Exercise
Using data science, cybersecurity researchers have released a new approach that makes automated phishing exploits almost as fruitful as typically more time-consuming spear-phishing methods.

HTTP/2 Bugs Could Deny Service for Millions
Imperva urges firms to implement safeguards

Italian Android RAT Targets China and Japan
New info-stealing malware could be part of wider APT campaign

#BUHSA Attacks on Activists are Prevalent, but Unsophisticated
State-sponsored attacks and tool used have been observed to not be sophisticated, but activists remain in danger.



