Infosecurity News

Blue Coat Expands Encryption Consortium
New members include eSentire, Gigamon, LogRhythm, ManagedMethods, Symantec, TopSpin Security and Trend Micro.

China Cuffs Hackers at Request of US Officials
Signs of greater co-operation between superpowers

Lyft Denies CTO Involvement in Uber Data Breach
Rival companies in legal tussle

Dow Jones Hacked, Affecting Thousands
Hackers manipulated a subscription system to steal personal contact information from August 2012 until at least July 2015.

Quarter of USPS Staff Clicked on Phishing Link in Audit
Exercise highlights importance of training and awareness programs

Webcam Voyeur Spied on Friends via RAT
Leeds man gets 20-week suspended sentence

UK Doctors Routinely Send Sensitive Patient Info by Text
Privacy fears after BMJ survey reveals dangers of BYOD

Moker RAT Has Unusual Characteristics
It can operate as a local access trojan, without a command & control server, receiving its commands locally, through a hidden control panel.

Samsung Pay Provider Hacked Secretly for Months
China suspected of grabbing IP from LoopPay

Malicious Android Adware Kemoge Roots Victim Devices
FireEye warns users not to click on suspicious links

Iran Threat Group Uses Fake LinkedIn Network to Target Victims
A network of fake LinkedIn profiles has been created to help the threat actors target potential victims through social engineering.

Cisco Snares Angler Cybercrime Group Worth $30m Annually
Talos group disrupts proxy network making a fortune from ransomware

VASCO to Acquire Silanis
Silanis provides electronic signature (e-signature) and digital transaction solutions used to sign, send and manage documents.

ID Theft Victims Remain Vulnerable Long After A Hack
Over a long-term period compromised identities are seen moving industries, likely in an attempt to defeat traditional fraud detection tools.

Attack Vector Aims at Microsoft Outlook Web Application
Attackers could record authentication credentials and be provided with complete backdoor capabilities.

Fresh Apple Malware Attacks Jailbroken and Non-Jailbroken Devices
It’s the first malware seen in the wild that abuses private APIs in the iOS system to implement malicious functionalities.

UK’s Nuclear Industry at Risk of Major Cyber-Attack
Chatham House warns ‘air gapping’ is a myth

Millennials Are Cyber-Slackers When it Comes to Security
18-34 year-olds put themselves at a higher risk than most by doing things like checking financial accounts on public Wi-Fi and not using a password on their phones.

Chip-and-PIN Deadline: US Nowhere Near Ready
Also, most cards will still only require the presenter to provide a signature to complete the transaction.

Banking Malware Gangs Refocus Efforts on UK
Sphinx, Kronos and Shifu all aimed at British banks



