Infosecurity News

Blue Coat Swaps Private Investors For $2.4bn
Bain Capital buys security vendor from Thoma Bravo

Apple, Microsoft Get Their FREAK Patch On
Microsoft also addressed Stuxnet vulnerabilities that have gone unpatched for five years.

CIA Conducting Ongoing Spy Campaign Against Apple—Report
Documents show the spy agency’s top researchers recently met at a secret annual gathering, the “Jamboree,” to discuss the best tactics for hacking iPhones et al.

Most SMBs are Unaware of Cyber-insurance
Despite a record number of data breaches, only 2% of SMBs actually hold cyber-insurance.

Check Point Strips Malware From Emails in Less Than a Second
Threat Extraction removes exploitable content from documents

OpenSSL Set For Major Security Audit
Researchers to report back in summer

Cyber-risk May Take a Bite Out of Apple Watch
Along with Apple's announcement of the Apple watch, time-keeping computer that users wear as a watch, come concerns that the device can open up new cyber-risks for the wearers.

Researchers Predict Phishing Domains to Block APTs
NLPRank uses natural language processing to identify spoofed domains

Malware-Ridden 'Xiaomi Handset' Found to be a Fake
Security firm Bluebox jumped to conclusions after buying pirated Mi 4

CIA Adds Digital Directorate in Sweeping Overhaul
The radical overhaul, the largest in a 70-year history, will put cyber operations front-and-center.

UK's NCA Makes Dozens of Arrests in Massive Cyber-Crackdown
25 separate operations, from DDoS attacks to espionage to a fraud ring, were disrupted in a week-long offensive.

Adobe Launches Cash-Free Vulnerability Disclosure Program
Software giant urges researchers to disclose flaws out of the goodness of their hearts

Casper the Unfriendly Malware Linked to French Spy Agency
Advanced reconnaissance tool likely authored by same people as Babar and Bunny

Mandarin Oriental Investigates Data Breach Incident
The point-of-sale malware attack likely occured just before Christmas.

FAA Air Traffic Control System Open to Hackers
Congress is concerned that a breach of air traffic control systems by terrorists could lead to physical hijacking, or midair collisions.

D-Link Pushes Firmware Updates for Vulnerable Routers
Three vulnerabilities could allow remote code injection, perform DNS hijacking or expose configuration information.

Rights Groups Call For New UN Privacy Watchdog
Desperate need for analysis, research and clarification of best practice

Simple PwnPOS RAM Scraper Stays Hidden for Two Years
Trend Micro spots yet another PoS malware variant breaching card data across the globe

Cyber Security Gaps Appear All Over Europe
BSA study shows best practice implementation is patchy at best

ENISA Hopes to Spur Government Cloud Adoption With New Guide
Cloud Security Alliace and Darmstadt university contribute to best practice framework



