Infosecurity News

Facebook Awards $10,000 Bug Bounty to 10-Year-Old
Finnish lad set to splash out on new bike after finding Instagram flaw

Introducing Infy: A Decade-Long Attack Campaign from Iran
Palo Alto uncovers a highly focused cyber espionage threat

Class-Action Suit Over Lost Mercy Health USB Drive Dismissed in PA Court
The case was dismissed despite allegedly losing a USB flash drive containing sensitive information for approximately 300,000 patients.

Hacker-For-Hire Pioneer Ordered to Pay $7 Million
Nikita Kuzmin created notorious Gozi malware

Third-Party Risk Escalates, But C-Suiters Aren't Paying Attention
Ponemon found that only 8% say improvement of their organizations' relationship with business partners is a top risk-management objective.

(ISC)2 Announces GISLA Finalists, Federal Reserve CISO to Keynote
U.S. Government Information Security Leadership Awards recognize excellence in advancing the nation’s cybersecurity program.

Wendy's Slapped with Lawsuit Over Data Breach
First Choice Credit Union’s lawsuit said hackers made “hundreds of thousands of fraudulent purchases” on credit and debit cards.

Google Pays Out $14K in Bug Bounties in Latest Chrome Update
Yes, a fake Chrome update is out there circulating, but Google released a real one this week too, with nine important patches.

American Dental Association Mails Malware-Laced USB Drives to Thousands
The ADA sent out 37,000 drives, some with malicious code that redirects recipients to a website service malware used for PC takeovers.

Wells Fargo to Roll Out Eye-Scans for Mobile App Sign-In
Customers will use their iPhone cameras to take a picture of their eyes in order to authenticate.

Fake ‘Google Chrome Update’ Malware Hits Androids
Technology company Zscaler has unearthed new Android malware which is capable of harvesting call logs, SMS data, browser history and banking information.

Systems Integrator Arrested for Philippine Election Hack
LulzSec member claims he wanted to point out security flaws in Comelec site

Lower House Passes Email Privacy Act
Unanimous approval for long overdue update to the law

Symantec Set to Appoint New CEO as Brown Steps Down
Symantec has confirmed that CEO Michael Brown is to step down, as it reported a drop in shares and its estimated revenue was $12 million lower than its forecast of $885 million-$915 million.

Elizabeth Denham Approved as Next ICO
Canadian gets parliamentary green light, and now the hard work begins.

Qatar Bank Hackers Got in Via SQLi – Expert
Trend Micro claims breach was child’s play

C3 Alliance is a Justice League for Privileged Account Protection
CyberArk brings together a super-group of companies like FireEye, ForeScout and Intel to boost privileged account security.

Waze App: The Road to Stalking Drivers
A vulnerability in the Waze traffic app allows hackers to create "ghost riders" for tracking drivers in real time via GPS.

Angler Exploit Kit: Biggest, Baddest Drive-By Shooter in Town
A full 80% of the active drive-by attacks observed in the past month can be attributed to the Angler exploit kit.

Qatar Bank Hack Exposes ‘MI6 Spies’
Data dump features profiles which could be used in follow-on attacks



