Infosecurity News

Symantec Tells Google to 'Distrust' Root Cert
Protective measures needed after legacy root falls out of compliance

Alibaba.com Hit with Widespread Phishing Campaign
The primary method of attack is a random phishing campaign that employs well-crafted spoofing methods.

Most Federal Agencies Now Use NIST Cybersecurity Framework
A survey has found that 82% of federal IT respondents’ organizations are using the NIST framework to improve their security stance.

A Look at 2015: Cyber-Threats Show Evolution and Growth
Kaspersky Lab says that 2015 has changed the rules of the cybersecurity game.

German Cybercriminals Develop Flourishing Local Black Market
Trend Micro report uncovers some highly localized offerings

Consumers Won't Shop with Breached Firms – Report
Gemalto study offers food for thought during hectic festive period.

Volume of New Malware Files Drops in 2015
Cybercriminals look elsewhere to get results, says Kaspersky Lab.

Bankers Fear Cybercrime More than Economic Failure
PwC report claims ‘creaking technology’ is no match for determined hackers.

Airline Customers' Data Exposed by HTTPS Hole – Report
Wandera claims 16 firms have failed to use HTTPS for payment data and PII

Iranian Groups Hit ISPs with Info-Stealing Attacks
Two new cyber espionage campaigns spotted in Middle East

Only One Third of SMBs Can Manage IT Security
Webroot study finds US firms’ losses way outstrip those of UK companies.

UK Now Number One Source of DDoS Attack Traffic
Akamai claims this could be start of a long-term trend

Over 130,000 Phones and Laptops Left in UK Bars
Eset warns of device security risk going into festive party seasons.

FireEye Releases Research on Bootkit Targeting Credit Card Data
Security firm releases new research around a financially motivated threat group targeting credit card data by using sophisticated malware executed before an operating system boots.

SMB Sector ‘Seriously’ Exposed to Cybercrime Risks
The UK’s small to medium-sized business sector is leaving itself wide open to serious cyber-crime risks says insurer.

APT 28 Group Ramps Up Activity Tenfold in 2015
Kaspersky Lab warns hackers are trying to jump air-gapped networks.

Microsoft Overtakes IBM as Most Buggy Software Vendor
Flexera report claims bundled Flash is to blame.

Happy Hour for Hackers as Wetherspoons Suffers Data Breach
British pub chain was hit back in June

Cloud Security Concerns Persist for Majority of Businesses
A full 69% of companies are afraid that migration to the cloud will increase risks of unauthorized access while 43% worry about account hijacking.

Web Scripting Languages Fail OWASP Top 10
Veracode warns of widespread vulnerabilities in PHP, ASP and ColdFusion.



