Infosecurity News

#COVID19 Pushes More Fraud Online
UK banks say social engineering is on the rise

Zerologon Windows Server Flaw Used in Active Attacks
Admins urged to patch immediately to prevent system takeover

Report Outlines Importance of Providing Engaging User Awareness Training
Interesting training far more likely to change how employees think about security

Attacks Against Oil and Gas Industry on the Rise
Cyber-criminals are increasingly targeting industrial control systems in the oil and gas industry

US Customs and Border Protection Failed to Safeguard Data
CBP “did not adequately safeguard” sensitive data in facial recognition technology pilot

America Moves to Protect Free Speech Online
US Justice Department calls for reform of Section 230 of the Communications Decency Act

Evasive Malware Threats on the Rise Despite Decline in Overall Attacks
70% of all attacks in Q2 involved zero-day malware

Bug Fixes Take Twice as Long for Manufacturing Firms
Kenna Security shines a light on vulnerability management in 14 sectors

Millions Exposed in #COVID19 Surveillance Platform Snafu
Basic security mistakes leaked 54GB of sensitive medical data in India

Most UK Firms Admit #COVID19 Cloud Security Threat
Cloud adoption saved UK firms but exposed them to greater risk, says Centrify

Gaming Industry Subjected to Surge in Attacks Over Last Two Years
The sector faced 10 billion credential stuffing attacks in the two years

Thieves Fail to Auction Bruce Springsteen's Legal Documents
Cyber-criminals threaten to publish stolen Springsteen docs following auction flop

ConnectWise Launches Bug Bounty Program
ConnectWise partners with HackerOne to reward discoverers of vulnerabilities

eBay Execs to Plead Guilty to Cyber-Stalking
eBay executives to admit cyber-stalking Massachusetts couple who criticized the company

UK’s MOD to Expand Digital Capacity Through Introduction of Oracle Cloud infrastructure
Oracle Cloud infrastructure is being made available to the MOD

Shopify Insiders Attempted to Steal Customer Transactional Records
E-commerce merchant Shopify detects ongoing insider threat

Cisco: How Real is a Passwordless Future?
Can a passwordless strategy work for security?

Most Workers Not Interested in Switching to a Cybersecurity Role
Challenges of attracting new entrants into the industry laid bare

FBI Issues Warning Over US Election Disinformation Campaigns
Foreign actors and cyber-criminals could spread fake news to sow discord

CISA: Detections of LokiBot Info-Stealer Are Soaring
Widespread Trojan menace trips agency’s IDS alarms



