Infosecurity News

Millions of Machines Are Running Unpatched Java and IE
A new report reveals shocking numbers of unpatched systems and software.

Kaspersky Expands Partnership with INTERPOL, Europol
Information-sharing will continue to be critical as cybe-rcriminals extend their tactic of attacking from shadowy, virtual locations, with a target area of 2.7 billion people.

US Attorney General Slams Strong Phone Encryption
Holder claims it helps protect online criminals and child abusers

Porn Spammer Hacks Legit Sites to Sell Naked Celeb Pics
Hundreds of web servers have been compromised, says Cloudmark

(ISC)2 Congress 2014: Panel Make Recommendations for Improving Cybersecurity Workforce Competency
The (ISC)2 Foundation and University of Phoenix recently conducted a National Roundtable on Cybersecurity Workforce Competencies. At the (ISC)2 Congress, co-located with ASIS International, in Atlanta, a panel discussed the roundtable findings and the steps being taken by the educational institutions developing tomorrow’s cybersecurity talent.

Dragonfly/Havex Targeting Pharmaceutical Sector
While it's best-known for attacks on energy companies and use by Energetic Bear, Dragonfly malware is likely aimed at pharma companies.

Malicious Shellshock Traffic Invades the Web
Attackers actively scanning for vulnerable machines, says FireEye

Hundreds of US Stores Affected as POS Provider is Hacked
Customers of over 300 restaurants may have had their card details stolen after Signature Systems breach

US Banks Get Serious on Security Information Sharing
New JV Soltra will develop threat intelligence products to help in the cybercrime fight

Apple’s New iPhone 6 TouchID Hacked, as Usual
Researchers find little change from iPhone 5

BT: Confidence in the Cloud Hits Rock Bottom
Meanwhile, most organizations are moving to the cloud anyway, but many are choosing consumer products despite security risks.

Backlash: Half of Consumers Take Business Elsewhere Post-Breach
Most consumers hold executives directly responsible and criminally negligent for compromises.

Critcial BERserk Flaw Opens Door to SSL Spoofing and MiTM Attacks
Malicious parties can set up fraudulent sites that masquerade as legitimate businesses protected by secure sockets layer (SSL).

Shellshock: Internet in Peril Again as ‘Heartbleed 2.0’ Bash Flaw Strikes
Vulnerability could put up to 50% of global web servers at risk

FBI Warns Public About New IC3 Email Scam
Fraudsters are pretending to be employees at Internet Crime Complaint Center

Apple Pulls Buggy iOS8 Bug Fix After Users Revolt
Cupertino in disarray as update introduces major signal and TouchID issues

Feds Issue Red-Flag Advisory on Escalating Insider Threats
Dropbox, DDoS and shared passwords have led to the loss of $5,000 to $3 million in several recent incidents.

Spike DDoS Kit Driving 'Huge' Multi-Vector Attacks
The new toolkit leverages internet of things (IoT) devices and a host of traffic techniques to launch massive attacks.

UK Banks to Get Real-Time Threat Alerts
BBA to partner with law enforcement and government to provide intelligence on financial crime

A Souped-Up Tinba Reemerges to Target Global Banks
Since its source code was leaked in July, Tinba has gotten a host of new—and dangerous—features.



