Infosecurity News
Dragonfly 2.0 Attackers Probe Energy Sector
Determined group may already have access to operational systems, warns Symantec
Lenovo Slapped with $3.5M Fine over Superfish
32 states have won a multimillion dollar settlement to resolve violations of state consumer protection laws.
Apache Struts Vulns Threatens Fortune 500 Data
A critical remote code execution vulnerability has been found in the popular open-source framework, threatening corporate data.
Enterprises Struggle to Contain “Information Security Debt”
451 Research claims consolidation must focus on data and risk-centric approaches
MongoDB Customers Held to Ransom Again
Over 75,000 victims and counting
28 Million Users Breached at Taringa, Latin America's Reddit
The records included usernames, email addresses and passwords hashed with the easily cracked MD5 algorithm.
Latvia Warns of Growing Russian Fake News Challenge
West is failing to halt Kremlin propaganda, says foreign minister
Non-Profit Calls for UK-Ireland Cyber Task Force
Countries facing increased threat levels post-Brexit, warns ICCTF
Instagram Hackers May Have Details on Six Million Users
Celeb victims include Taylor Swift and Leonardo Di Caprio
GitLab Vulns Could Lead to Session Hijacking
The vulnerability stems from the type of session tokens used by GitLab.
MacEwan University Defrauded Out of $11.8mn in Phishing Attack
Staff fell for a business email compromise gambit after receiving a request to change banking info for a vendor.
Juniper to Acquire Cyphort
Juniper will use the buy to shore up its own cyber-portfolio—including its virtualized security offerings.
Foreign Firms Should Fear New Chinese Cyber-Law: Report
Source code reviews could generate exploits for Chinese spies
Nottinghamshire County Council Exposes Elderly, Disabled PII for 5 Years
The council has been fined £70,000 by the Information Commissioner’s Office.
Cyber-squatters Target Luxury Brands from Fendi to Prada
These domains are often used in phishing and scams, including pay-per-click ads, for-profit survey sites and social media scams.
Ransomware Infections on Course to Top 2016 Figures
Symantec claims organizations are increasingly under threat
Half of Global Firms Failing on PCI Compliance
Verizon says key in-house skills are often missing
Locky Ransomware Rears its Head in Big August Campaigns
It's back with a second wave of new but related attacks that build on a variant uncovered in early August.
Jimmy Nukebot Explodes on the Scene, Transforming NeutrinoPOS
It’s no longer in the banking business. Rather, it’s designed to help bad actors do so much more.
Office 365 Campaign Attacks Companies from Within
Attackers target Microsoft Office 365 to harvest login credentials and attack from within an organization.
