Infosecurity News
Android Auto-Click Adware “Judy” May Have Hit 36 Million
Google was forced to remove over 40 apps from Play store
NATO Cyber-Defense Group Adds New Nations to Its Ranks
NATO CCD COE has added two new member states, and two more will soon follow.
8,000 Vulnerabilities Found in Pacemakers
All of the programmers that White Scope examined had outdated software with known vulnerabilities. Many of them run Windows XP.
Fancy Bear US Election Hackers Doctored Leaked Documents
The Russian hackers behind the break-in at the DNC have been caught inserting fake information into stolen documents.
Microsoft Issues Out-of-Band Security Update
Malware Protection Engine fix released for eight RCE and DoS vulnerabilities
#EuroCACS Top 10 Cyber Risks Detailed
Malware, DDoS attacks and human behavior remain among the top cyber-risks.
Molina Health Exposes Scores of Patient Records to Open Internet
Countless patient medical claims were available online without requiring any authentication.
German Threat Actor Spreads Houdini Worm on Pastebin
This individual is also actively editing an open source ransomware variant called MoWare H.F.D.
Cloud Environments Suffer Widespread Lack of Security Best Practices
Organizations fail 55% of compliance checks established by the Center for Internet Security (CIS).
Shades of #WannaCry as Urgent Patch Issued for SMB Software Samba
Threat could spread far and fast, warn experts
UK IT Leaders: GDPR Will Drive Up Prices for Customers
Varonis study finds new law not a priority for nearly half of firms
Digital Ad Bot Fraud Set to Reach $6.5 Billion
Machines are getting better at apeing human traffic
Subtitle Attack Threatens Millions of Smart TVs, Mobiles and PCs
International and foreign-language film fans beware: Check Point researchers have uncovered a new attack vector that uses malicious subtitles to infect devices via their media players.
Cloak and Dagger Android Vulnerability is Supremely Dangerous
Cloak and Dagger is the malicious combination of two legitimate permissions.
GDPR - Companies Unprepared, Don't Know Where Data Is
Companies don’t understand how to search data, as regulators predicted to issue fines for ‘second awakening’ of GDPR
Target in Record $18.5m Settlement with States
Breach costs continue but pale in comparison to profits
Symantec Claims Further Lazarus Links but Critics Disagree
Thinktank points out too many inconsistencies
Enisa Urges Creation of IoT “Trust Label”
Latest report suggests new regulations to establish baseline security standards
Irish Police Recover 900,000 Euros in VAT Fraud Case
Nearly a million Euros have been recovered after Irish police arrested two in a sophisticated online fraud sting.
Data-Wiping Malware Takes Aim at IoT Devices
Hackers are adding data-wiping routines to some of the malware designed to infect IoT and embedded devices.