Infosecurity News
Bugcrowd Launches Open-source Disclosure Framework
The move is meant to encourage responsible vulnerability disclosure practices.
UK Drops Charges Against US Hacking Suspect Love
British man released from bail but another US indictment is filed as extradition pressure mounts.
C-Level Execs Concerned About Cybersecurity, But Not Investing in It
Time, interest and funding are all lacking despite the reputation hazards of a data breach.
Critroni/Onion Is Most Sophisticated Ransomware Yet
The malware uses the Tor anonymity network to attack its victims.
One in Three Ex-employees Can Access Corporate Networks
Research shows that insider threats continue long after job termination.
UK Netizens Unmoved by ISP-level Porn Filters
Ofcom report shows only small percentage of users switched on parental controls.
StubHub Breach Part of a Coordinated, International Cybercriminal Ring
Law enforcement agencies in several countries have carried out a joint disruption of the alleged perpetrators.
Internet Explorer Vulnerabilities Double in 2014
Criminals, as ever, adapt to go after low-hanging fruit.
ISACA Revamps COBIT 5 Core Principles
Five new core tenants will underpin the framework.
Nigeria’s 419 Scammers Trade Up to Info-Stealing Trojan Attacks
Palo Alto Networks warns of new risk to businesses from relative malware 'novices'.
Snowden to Hackers of the World: Build NSA-proof Systems
Technologists also have a ‘civic duty’ to teach those around them how to use tech safely, whistleblower Edward Snowden says.
Nasdaq Hackers Used Two Zero Days But Motives a Mystery
US intelligence pointed finger at Moscow but questions remain three years on.
Critroni Ransomware Makes Its Way into the Wild
Tor and key-based encryption anchor this sophisticated malware.
LinkedIn Users Hit With New Phishing Scam
Latest phony email claims recipient’s account has been blocked.
Privileged Accounts at Root of Most Data Breaches
A survey suggests that this vulnerability is the most critical in any organization.
German Lawmakers Mull Return to Typewriters to Outfox NSA Snoopers
Extreme measures considered in response to allegations of ongoing US spying.
Active Directory Flaw Could Threaten 95% of Fortune 500 with Massive Information Heist
An attack can evade detection and log-based security systems, but Microsoft says it's no big deal.
Microsoft's Answer to Buggy Code: Monitor the Coder
Eye-tracking, EEG and EDA sensors could alert managers when programmers are struggling, according to new study.
Banks Often Neglect to Investigate Fraud Claims
Many believe that paying victim damages is less expensive than investing in security.
SSL Blacklist Takes Aim at Bad Certificates
The public database publicizes malware-associated SSL certificates.
