Infosecurity News

Snowden: UK Intercepted Hundreds of Journalist Emails
GCHQ recorded and saved emails from reporters at the BBC, Reuters, the Guardian, the New York Times, Le Monde, the Sun, NBC and the Washington Post, then shared them out on the agency’s intranet.

GoDaddy CSRF Flaw Allows Total Domain Hijacking
A researcher discovered there was absolutely no CSRF protection at all on many GoDaddy DNS management actions.

White Hat Rally 2015 Launch Party: You're invited
If you haven't yet got your ticket for the White Hat Rally launch party, sign up now and join the team for a social get together tomorrow night…

Biometric App Downloads to Top 770 Million by 2019 – Report
Juniper Research claims Apple and others will lead the way to widespread adoption

Verizon Fixes FiOS Flaw Which Exposed All Users' Emails
Customer spots serious API oversight

China Blamed for MITM Attack on Outlook
Man in the middle hits mobile users as crackdown on encrypted services continues

Carberp Rampages Across Australia
This is the third iteration of the kit since the source code for the original version was leaked in June 2013

Led by Ransomware, Android Threats Surge 75%
Attackers’ strategies have radically shifted from simple premium SMS scams

Experts Warn Facebook Users of ‘Hottest Snapchats’ Scam
Bitdefender reveals yet another lure which social media users should avoid

Firms Waste $1.3 Million Each Year on False Positives
Damballa report claims 21,000 hours are wasted dealing with fallout from poor security controls

KPMG: FTSE 350 Boards Lack Cybersecurity Know-How
New study claims communication breakdown is harming risk management efforts

Marriott Won't Block Guest Wi-Fi Devices After All
The hospitality giant said that it wanted to manage the connections in order to maintain security standards.

Fake BBC News Site Baits Victims with Charlie Hebdo Misinformation
The attack took pains to appear to be state-sponsored.

Department of Homeland Security Drops the Ball on Access Control
DHS completely lacks a strategy when it comes to the security of the computers that monitor and control building operations.

EU Security Agency Calls for Stronger Privacy Technology
UK PM Cameron faces Brussels showdown over plans to ban encrypted comms

Microsoft Kicks Off 2015 with an All-Windows Patch Tuesday
Easy for admins but a controversial update round for Redmond

Skeleton Key Malware Unlocks Active Directory Authentication
Dell SecureWorks spots new threat, but it lacks persistence

American, United Airlines Hit By Mileage-Loving Hackers
Thieves with stolen usernames and passwords have broken into customer accounts, booking trips with frequent flier miles.

Cisco: Complacency and Ignorance Make Staff Major Security Threat
Twice as many take security more seriously at home than in the office

TechUK in Bid to Boost Security With Best Practice Doc
Top 10 vulnerabilities in web apps and infrastructure revealed



