Infosecurity News

Just One Critical IE Bulletin for September’s Patch Tuesday
Admins look forward to a lighter round of Microsoft security updates

Feinstein: No Privacy Worries in Cyber Info-sharing Act
The latest government cybersecurity bill has come under attack.

Vawtrak/Gozi Banking Trojan Poised to Become Major Threat
New capabilities are expanding the malware's target area and threat level.

Apple CEO: iCloud Nude Photo Hack Wasn't Our Fault
Tim Cook stressed the "awareness piece" and said that 2FA is coming for mobile logins.

Barclays Unveils Vein Scanner to Authenticate Customers
Bank jumps aboard the biometrics bandwagon in bid to reduce corporate account fraud

China Launches Man in the Middle Attack Against Google
Beijing keen to censor and monitor searches made by users of CERNET education network

New York Times Hackers Retool for New Onslaught
APT12 keeps a close eye on media coverage to stay one step ahead of defences, says FireEye

McAfee: Phishing Awareness Remains Abysmal
Nearly one million new phishing sites have appeared this year so far.

Nude Celeb Pics Give Way to Widespread Scams
Social engineering lures using Facebook, Twitter and fake 'photos' are proliferating on the web.

Chinese Cybercrime Soars as Tools are Traded Online
Trend Micro sees participants and message volumes double

Goodwill Admits Card Breach at 330 US Stores
Malware targeted third party payment processing systems

Hackers Spend $150K to Disguise 12 Year Info-Stealing Campaign
Harkonnen Operation sent data to domains registered to false UK companies

Mozilla Combats MiTM Attacks, Rogue Certificates in Firefox 32
n Firefox 32, Mozilla has added public-key pinning as an extra security measure to prevent man-in-the-middle attacks, use of rogue certificates, and other critical security threats.

Semalt Hijacks Hundreds of Thousands of PCs for Massive Botnet
The spam bot is being used to carry out a large-scale, global offensive bent on fooling search algorithims.

NATO Set to Ratify Cyber as Key Military Threat
Alliance will invoke collective defense clause if one member country is hit with major online attack

Hackers Use Large Numbers of Transient Domains to Hide Attacks
Hackers Use Large Numbers of Transient Domains to Hide Attacks. Research shows 71% of hostnames appear for one day or less

UK Phone Users Most Likely to Lose Device Down the Pub
Lookout claims 12-5pm is the most dangerous time for smartphone theft

Russian Gang's Billions of Stolen Credentials Resurface in New Attack
The billion-plus credential theft by CyberVor hackers is now leading to compromises at Namecheap.

Oblivious Celebrities Bring Nude Photo Hack on Themselves
Poor password choices and a lack of two-factor authentication created the hacking opportunity.

HP Warns of Growing North Korean Cyber Menace
Rogue state might seem short on tech know-how but it’s building offensive capabilities, says report



