Infosecurity News

Fox-IT Expands Financial Platform to US
DetACT correlates click-path, event information, traffic information, financial information and historical information in real time.

Chinese Site Serves 83 Windows Executables in Drive-By Attack
Vid sharing site could lead to remote code execution

Phishers Out in Force to Con Yahoo and Dropbox Users
Latest scams hit inboxes at the double

Report: Chinese Breach of USIS Started with SAP
This marks the first time an SAP attack against a national security service provider has been publicly uncovered.

Beijing to Troops: Wearables Represent a National Security Risk
China not happy with soldiers wearing fitbands

Jamie Oliver Serves Up a Heaping Plate of Malware
The website for the UK celebrity chef has been compromised for the third time this year, to serve password-stealers.

Hackers Target Starbucks Mobile Payments App
The ingenious scam takes advantage of the auto-refill function that tops up balances with a linked bank card.

FTC Takes Out Diet Pill Spammers
Sale Slash has a date in court after alleged scam

Adobe Set to Patch Two Critical Flaws in Acrobat
Priority 2 vulnerabilities will get fixed on Tuesday

IT Security Pros Split on Cloud Trustworthiness
The majority of IT security professionals don’t have full visibility into where all their organization’s sensitive data resides.

Widespread Nuclear EK Attack Hits 12,500 Users Per Day
Using a Flash vulns to compromise an ad network, the exploit kit served Carberp, the banking Trojan.

Massive Malvertising Campaign Hits Multiple Porn Sites
The campaign is affecting dozens of top adult sites, with over 250 million monthly visits combined.

Execs Say Cyberattacks Could Disrupt Whole Industries
A coordinated assault would wreak ongoing havoc on business operations, even threatening national security.

US Navy Looks to Dump Lenovo Servers on Security Concerns – Report
Department of Homeland Defense apparently not happy post-IBM deal

Lenovo Systems Update Flaw Could Allow Hackers to Swap in Malware
Now patched vulnerability branded as major security risk

Hackers Target Careerbuilder to Push Malware
A fresh campaign is leveraging the site to serve up completely realistic malware-laden documents.

Lack of DR Testing Could Put Election at Risk – Report
Databarracks claims half of London’s councils haven’t tested disaster recovery plans

New ‘NSA’ App Designed to Expose Android Apps’ Secret Web Visits
Eurecom research claims 2000 apps connected to 250,000 URLs

Sally Beauty Admits it May Have Been Breached Again
Second time unlucky in the space of a year for cosmetics giant

E-commerce Giant Alibaba Builds Secure Mobile OS for Chinese Cops
PMOS will keep police safe from foreign hackers



