Infosecurity News

Patch Tuesday Brings Badlock Bulletin and Zero Day Fixes
Experts warn admins not to be distracted by overhyped bug

Massive Syrian Government Hack All Down to Joomla
The Cyber Justice Team obtained the info by exploiting known and outdated vulnerabilities in the web portals used by the Assad regime.

BadLock Opens Door for Samba-based MiTM, DDoS Attacks
The researchers who discovered it noted, “we are pretty sure that there will be exploits soon after we publish all relevant information.”

Chinese Hackers Bribe Their Way onto Third Party App Stores
Check Point claims security vendor’s whitelisting didn’t work

Petya Decryption Tool Now Available
But ransomware authors are working on a solution, warn experts

Researcher Unearths Flaw in Popular Modems
The vulnerability leaves modems open to unauthenticated reboot attacks

SQL Injection Flaw Found in Mossack Fonseca CMS
Panamanian law firm had poor cybersecurity posture

Tens of Millions of Desktops Still Run Windows XP
Vulnerabilities discovered in XP will not be patched by Microsoft, leaving millions of businesses open to "0-days forever."

Citadel Banking Trojan Returns as 'Atmos'
The new strain is currently targeting banks in France and it was also spotted being delivered with TeslaCrypt.

Nationwide Trialing Behavioral Biometrics
New app will authenticate mobile banking customers

Black Hats Bungle Adobe Flaw
Exploit only affected users of older version, says Malwarebytes

1 in 10 Britons Engage in 'Honest Hacking'
Another two in three (62%) are accidental hackers, having inadvertently logged into someone else’s account on a shared computer.

Unpatched Software, Misconfiguration Plague 1000s of Organizations
Nearly all of these exploitable weaknesses—a present for criminals—are easy to fix with software patches or simple administrative changes.

Every Voter in Philippines Exposed in Mega Hack
Massive data breach may affect as many as 55 million

Consumers Fearful of Future IoT World
The majority of consumers are worried about a world of connected devices, according to new research by Mobile Ecosystem Forum.

Eset Claims Victory After Mumblehard Spam Bot Shut Down
Nearly 4000 Linux systems were compromised

LA Times Fixes WordPress Flaw Offered for Sale
Hacker took to Twitter to offer access to site

Amazon Implements Password Reset after Credentials Leaked Online
Amazon said because password re-use is rampant, it wanted to take the opportunity to prompt customers to protect themselves.

Adobe Preps Patch for Critical Flash Bug Exploited in Wild
Flaw is being exploited to target Windows systems

Cognitive Biometrics Goes Commercial with Behavior ID
A complex mix of mouse dynamics, keystrokes, GUI interaction and advanced behavioral algorithms establish a unique user profile.



