Infosecurity News

Porn Sites Deliver Money-Stealing Android Trojan
Android Marcher trojan uses porn sites to scam users into giving up financial data.

Hackers Breach and Shame the KKK's Security Company
The hackers released Staminus customer information, including that for sites belonging to the Ku Klux Klan.
MWR Opens HackFu for Entry
MWR InfoSecurity has announced the launch of the ninth annual HackFu Challenge, designed to test contenders’ hacking, scripting, tinkering, lock-picking, crypto and problem-solving skills to the extreme.

Cyber Crooks Steal $80 Million from Bangladesh Bank
Online heist is one of the biggest in history

Adobe Issues Patch for 23 Flash Flaws
One of the vulnerabilities is being actively exploited

Rosen Hotels Becomes Latest Chain to Suffer Data Breach
Hotel giant failed to spot intrusion for well over a year

21st Century Oncology Breach: A Sign of Things to Come
The breach affecting 2.2 million demonstrates a new trend in healthcare hacks: expanding beyond hospitals and insurance.

Boardroom-CISO Communications Breakdown is Endemic
Osterman Research finds fewer than 40% of IT and security executives feel they get help from the board to address cybersecurity threats.

Siloed Network Security Leads to 5+ Incidents Per Year
Frost & Sullivan found that 72% of large enterprises saw 5+ security incidents per year—mostly driven by attacks on managed devices.

ISIS Data Breach Leaks Recruits’ Details
Coup for Western intelligence agencies as key USB drive is stolen

Most CIOs Fear Fines Under New Euro Data Protection Laws
Egress report reveals too many are focused on external threats

Facebook Fixes Major 'Brute Force' Bug
Social network issues grateful $15,000 bounty for beta site flaw

Unlucky 13 as Microsoft Unveils March Patch Update
Five critical security bulletins to address this month

Whalers Con Employee W-2s Out of Environmental Resource Management
Part of a rash of tax season phishing efforts, ERM is the latest to hand over everything needed for identity theft and tax return fraud.

Consumers Don't Trust .ninja and Other Newfangled Domains
Over half of surfers (52%) express discomfort in visiting websites ending in new domains.

EFF Releases Millionth Free HTTPS Cert
'Let's Encrypt CA' helps build a more secure and better encrypted internet.

NatWest Vows to Improve Security After SIM Swap Fiasco
Investigation shows how easy it is to drain bank accounts

Google Open Sources Framework to Improve Third Party Security
Vendor Security Assessment Questionnaire should help firms and their suppliers

High-Seas Pirates Turn to Cyber-Espionage
Uncommonly wired sea-pirates hacked bills of lading for future shipments and vessel routes to plot out their attacks ahead of time.

Fresh APT Found Targeting Indian Military, Diplomats
The multi-vector campaign drops a remote access trojan (RAT) with data exfiltration, screen capture and keylogging capabilities.



