Infosecurity News

Majority of Firms Would Hire Ex-Cons as Cyber-Security Pros
Skills shortages are forcing a radical rethink of hiring strategies, says KPMG

Android, Windows Phone Withstand Pwn2Own Onslaught
Only partial pwnage was achieved despite Android's bad reputation.

1/5 of Grade Schoolers Met Up with Online Strangers in Real Life
A rampant lack of parental supervision of online behavior is placing many kids under 11 in unsafe situations.

Malicious Tor Exit Node Linked to MiniDuke APT Campaign
F-Secure says OnionDuke malware has already been used against European government agencies

EFF: ISPs Stripping Encryption from Personal Mails
By default the sending server will transmit plaintext email over the public Internet, where it is easily subject to eavesdropping and interception.

77% of SMBs Think Employees are Dangerous
Employees need better cloud security tools, but recent hacks haven't made any significant impact on SMB security decisions.

Hackers Hit US Weather Agency in Mystery Attack
NOAA accused of cover-up as cause of incursion remains unknown.

Stuxnet Was First Aimed at Five Iranian Industrial Firms
New revelations claim contractor for the Natanz facility was ‘patient zero.’

Company Director Fined Just £500 After Illegal Data Access
He pretended to be Orange security staff member to get log-ins for customer database.

Hong Kong Sites Hit by 111% Rise in DDoS Attacks
Massive October spike coincides with pro-democracy protests

State-sponsored Hackers Gear Up for G20
CrowdStrike warns Chinese attackers and hacktivists may be readying campaigns

Russian Government ‘Condoned’ Cyber Attacks on West
Mandiant boss says Kremlin and criminal elements have stepped up activity

Rotten Tomato: APT or Common Hack Attempt?
The attackers are not only using the aging CVE-2012-0158 vulnerability, but the newer CVE-2014-1761 as well, exploiting these to download or drop a Zbot variant.

Home Depot: Massive Breach Happened Via Third-Party Vendor Credentials
Home Depot also said that 53 million email addresses were stolen along with the previously disclosed 56 million payment card details.

(ISC)2 Gives US Veterans a Cyber-leg Up
The foundation has announced the first round of recipients of the 2014/2015 U.S.A. Cyber Warrior Scholarship.

Aussie Spies Warn G20 Delegates to Expect Cyber Attacks
Signals Directorate releases best practice advice on how to stay safe online

Facebook Reports Increased Law Enforcement Info Requests
The latest transparency report shows the highest number of requests ever recorded for info on the social network's users.

Samsung Says 'Find My Mobile' is Safe from Hackers
The app, used for Galaxy devices remotely, has been patched.

UK Data in Peril as Rovnix Infects Over 130,000 Machines
Information-stealing trojan has its sights set on Blighty

Q3 Spike Sees 20 Million New Malware Strains
Panda Security stats show trojans still top the list



