Infosecurity News

Classic Tech Support Scam Gets Multilingual Makeover
Scammers are tapping into brand new markets in Europe and Japan with a sophisticated, stealthy and flexible campaign using global call centers.

Three Quarters of UK Businesses Not Confident of Detecting Data Breaches
Nearly half (49%) of respondents admit to having experienced a breach in the past 12 months and believe it could have been avoided.

(ISC)² Foundation Adds Senior Safety to Cyber-Education Mix
The program will help this vulnerable group to understand the dangers of the digital era and protect themselves online.

University of Virgina Targeted by China, Officials Say
It started with a few software vulnerabilities that the intruders were able to effectively exploit.

Two-Thirds of Companies Expect a Nation-State Attack
Most respondents also said targeted attacks against their networks have increased over the last year by 20% or more.

Webcam Voyeur Hacks Laptop to Spy on Toronto Couple
Creepy images sent to victim's Facebook account

Salesforce Patches Dangerous XSS Flaw
Phishing and malware distribution on the cards

Android Hit Again—This Time with a Sandbox Bypass
HTML that the attacker controls can read from the files loaded into the iFrame and extract their data.

Facebook Awards $100K Internet Defense Prize
The Internet Defense Prize was created by the social network to showcase superior defensive security research.

Smart Watches Fail the Data Security Test
Trend Micro finds several security flaws in range of popular devices

Majority of Americans Want to See Snowden Trial
Support wanes with only a third calling for pardon

Dropbox Aims to Thwart Phishers with 2FA Security Keys
Support for USB log-in keys should encourage secure authentication

Press Release Leak Spawns Insider Trading Bonanza
Assets with little face value—and therefore protected with minimal security—have been converted into significant monetary gain.

Windows 10’s Edge Gets First Critical Patch as Admins Get 14 Bulletins
New browser already targeted in a busy month for IT staff

Carphone Warehouse Hackers May Have DDoS-ed Firm
DDoS increasingly used to distract IT teams ahead of data theft

Over Half of Android Devices Hit by Remote Control Bug
Hackers could exploit deserialization vulnerability to steal sensitive data

US CERT: Zero-Day-based Phishing Campaign Rampages
The campaigns target US government agencies and private sector organizations across multiple sectors.

Darkhotel APT Group Resurfaces with Hacking Team Zero-Day
Darkhotel is the latest APT group to make use of the zero-days and exploit tools leaked in the Hacking Team breach.

YouTube: A Key Enabler for Voyeurism?
YouTube hosts thousands of videos, which offer: tutorials on how to use RATs; the faces and IP addresses of victims; and links to download RATs they can use to slave devices.

Networking Biz Ubiquiti Transfers $46.7 Million to Fraudsters
SEC filing claims ‘employee impersonation’ was to blame



