Infosecurity News

TalkTalk’s Profits Halve After Breach
Cautionary tale for firms which don’t invest enough upfront in cybersecurity

NIST, CIS Security Frameworks See Mainstream Adoption
84 percent of respondents used some type of security framework, and most organizations surveyed used more than one.

Panama-Style Offshore Services Touted on Darknet
Hackers are hiring underground providers to hide their funds

A Quarter of Windows Users are Running Outdated Internet Explorer
This exposes unpatched Windows users to more than 700 known vulnerabilities (including those that affect IE 11 and Edge).

Google Hit by Insider Data Breach
Employee details accidentally leaked by benefits management firm.

Former PLA Soldier Sentenced After Damaging US Army PC
Wei Chen was given security clearance at a defense contractor

VirusTotal Changes T&Cs to Stop Abuses
Some AV firms are taking data without contributing

Walmart Confirms Card Data Theft
US retail giant Walmart has confirmed reports that a number of its customers have had their payment cards compromised and bank accounts drained.

ICO Fines Health Clinic for Revealing HIV Patient Names, Addresses
An administrative error resulted in addresses wrongly entered into the ‘to’ field instead of the ‘bcc’ field.

Swiss Defense Minister: Davos Was Targeted by Cyberattack
He said that he suspects the attackers were bent on cyber-espionage, and were likely of Russian origin.

Panama Papers Source Offers to Work with Law Enforcement
The unidentified source said that the papers prove that a wide range of crimes are being carried out by the ultra-wealthy, unchecked.

White Hat Researcher Jailed for Exposing SQLi Flaws
Florida police cuff security boss following election site hack

AlphaLocker Makes Ransomware Easy and Profitable for All
A $65 price point allows the less-skilled to use ransomware with little to no coding and zero ramp-up time.

Banking Trojan Targets US and Mexico Using App Libraries
It tracks for certain URLs (including for Mexico’s second largest bank, Banamex), intercepts websites and inserts proxies.

Hackers Replace Ransomware with Dummy File
One small step in the fight against Locky

Android Flaw Affects Millions of Devices Going Back 5 Years
It gives attackers access to victims’ SMS databases and phone history, and allows them to access the internet—all undetected.

ADP W-2 Breach a Perfect Example of 'FlowJacking'
HR giant ADP, which provides payroll, tax and benefits administration for more than 640,000 companies, was hit hard by identity thieves.

Online Fraud to Hit $25 Billion by 2020 – Report
Juniper Research reckons US switch to chip and PIN will have major effect

‘Disappearing Drives’ Top Reason for Data Loss
This may be caused by failing hardware or voltage fluctuations, and highlights the need to run regular backups for the data.

Russian Hacker Puts Millions of Gmail, Yahoo, Mail.ru Accounts Up for Sale—Report
Hold Security has uncovered 272.3 million stolen credentials for the world's largest webmail providers, for sale on the Dark Web.



