Infosecurity News

XSS and SQL Injection Plague Several NMSes
Flaws were found in products from Spiceworks, Ispswitch, Castle Rock Computing and Opsview, some of which have already been patched.

Religious Apps Put on the High Risk List by Proofpoint
Users should beware of innocuous-looking content

Landmark EU Data Protection Laws Near Finishing Line
EU institutions agree on General Data Protection Regulation

MacKeeper Breach Exposes 13M Apple Users
A flaw exposed the user names, email addresses and other personal information to the public internet.

Beware Pandora Jewelry 'Clearance' Offers
Emails with the subject line “Pandora Clearance” promise an extreme sale but instead capture credit card and financial information.

Ashley Madison Blackmailers Turn to Snail Mail Threats
Extortionists go back to basics

New Malware Declines in Q3 but Macros and Ransomware Flourish
McAfee Labs warns enterprises to be on high alert

Researchers Find Major Security Flaws in Parking Apps
Many developers not getting basics right, says NCC Group

NCA Leads International Cybercrime Exercise
Foreign Office sponsored program featured FBI and Eastern European agencies

Symantec Tells Google to 'Distrust' Root Cert
Protective measures needed after legacy root falls out of compliance

Alibaba.com Hit with Widespread Phishing Campaign
The primary method of attack is a random phishing campaign that employs well-crafted spoofing methods.

Most Federal Agencies Now Use NIST Cybersecurity Framework
A survey has found that 82% of federal IT respondents’ organizations are using the NIST framework to improve their security stance.

A Look at 2015: Cyber-Threats Show Evolution and Growth
Kaspersky Lab says that 2015 has changed the rules of the cybersecurity game.

German Cybercriminals Develop Flourishing Local Black Market
Trend Micro report uncovers some highly localized offerings

Consumers Won't Shop with Breached Firms – Report
Gemalto study offers food for thought during hectic festive period.

Volume of New Malware Files Drops in 2015
Cybercriminals look elsewhere to get results, says Kaspersky Lab.

Bankers Fear Cybercrime More than Economic Failure
PwC report claims ‘creaking technology’ is no match for determined hackers.

Airline Customers' Data Exposed by HTTPS Hole – Report
Wandera claims 16 firms have failed to use HTTPS for payment data and PII

Iranian Groups Hit ISPs with Info-Stealing Attacks
Two new cyber espionage campaigns spotted in Middle East

Only One Third of SMBs Can Manage IT Security
Webroot study finds US firms’ losses way outstrip those of UK companies.



