Infosecurity News

Banks Beware: Nearly All of Your ATMs are Insecure
Kaspersky Lab claims physical and software-based flaws put customers’ cash at risk.

Less Than 1% of Severe/Critical Security Alerts Are Ever Investigated
Staff shortages mean that 88% of businesses have just 1 to 3 people investigating and triaging security events per day.

BT Tower Hosts Mock Retail Breach
In the second face-to-face challenge in Cyber Security Challenge UK’s 2016 series of competitions, the BT Tower hosted the mock investigation into a cyber-attack at the BT Tower in a bid to find the country’s best hidden cyber security talent.

Verizon: 93% of Compromises Take Less Than an Hour
Latest DBIR reveals firms are failing to get basics right

Sony Finally Implements 2FA for PlayStation Network
5 years after a data breach affected 77 million people, Sony implements two-factor authentication for the PlayStation Network.

US Presidential Primary Apps Leak Sensitive Data
Symantec has found that out of more than 1,200 presidential-primary-related Android apps, more than 50% exposed sensitive data.

SWIFT Software Bug Exploited by Bangladesh Bank Hackers
Attackers manipulated key database, according to report.

Philippine Police Cuff Comelec Hack Suspect
IT graduate arrested following country’s biggest ever breach

Mexican Voters at Risk as Database of 90+ Million Found
Information was publically available on Amazon cloud server

Adobe Customers May Have to Stick with Buggy QuickTime
Flash-maker claims some codecs remain dependent on the multimedia software

FIN6 Hackers Stole Millions of Cards – Report
FireEye and iSight Partners follow the money

SpyEye Masterminds Begin 24 Year Jail Term
Hackers were planning new version of banking trojan before their arrest

Compromised Credentials at the Root of a Quarter of All Data Breaches
Attacks often occur because of a failure to use multifactor authentication, insufficient password use and poor crypto policies.

Nation-State RAT Attack Vectors Get Smarter
The new technique ensures that the payload/file remains in memory through its execution—making it more undetectable.

#OpKillingBay Expands Target Focus
Akamai has observed the group threatening to attack whaling groups from Japan, Denmark, Iceland and the Faroe Islands.

New TeslaCrypt Variant Hidden in Delivery Tracker Email
Cyber Operations Platform Endgame has unearthed a new variant of ransomware that disguises itself as an email with tracking details for a “recent order”.

Outgoing Information Commissioner Stresses Need for GDPR Compliance
Outgoing Information Commissioner Christopher Graham talks of need for GDPR compliance.

UK Spies’ Mass Data Collection Laid Bare
New docs show authorities can build detailed profile on every citizen

Global Cyber Alliance Tackles Biggest Risks
New York County District Attorney Cyrus R. Vance, Jr., London Police Commissioner Ian Dyson are founding partners.

Less than a Quarter of Businesses Are Cyberattack-Ready
This is especially bad for companies in the retail and hospitality sectors, which were the top-attacked verticals in 2015.



