[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (89 articles)

|

// AI-powered summary generated at 16:00

> #BHUSA: You’re Dealing with Supply Chain Security Whether You Like it or Not
Improving the standard of security best practices across your supply chain is very difficult
> Majority of Global Orgs Lack Security Best Practices
For instance, four out of five companies don’t know where their sensitive data is located, or how to secure it.
> Iranian Espionage Campaign Hinges on Beautiful (But Fake) Woman
A well-established collection of fake social media profiles for 'Mia Ash' build trust and rapport with potential victims.
> Microsoft Turns Up $250,000 Bug Bounty for Windows
The program will pay out for remote code execution, elevation of privilege, or design flaws that compromise privacy or security.
> #BHUSA: Panel – Fad or Future? Getting Past the Bug Bounty Hype
At Black Hat 2017 a panel of experts gathered to discuss the concept of bug bounty programs and share their experiences with running these within their respective companies
> #BHUSA: Ransomware Profits Worth More than $25 Million (At Least)
Researchers say 2016 was "turning point" for ransomware and a year in which it became a multi-million dollar business
> Google Uncovers Highly Targeted Spyware "Lipizzan"
Israeli firm pegged for developing tool, possibly for state use
> Consumers Don't Trust Governments to Protect Data or Fight Cybercrime
Venafi study says majority disagree with encryption backdoors
> #BHUSA: Phishing Psychology: Why Training Fails & Attacks Prevail
Karla Burnett, security engineer at Stripe, explored ‘phishing as a science’, shining a light on the psychology of phishing and why attacks continue to be successful
> #BHUSA: Infosec Community Not Yet Reached Full Potential, Says Facebook CSO
A focus on better defense and diversity key to a safer, more secure future
> DDoS Attacks Could Disrupt Brexit Negotiations
DDoS could disrupt the negotiations themselves, or act as camouflage for the theft of confidential documents.
> Unicredit Reveals Double Breaches Affecting 400,000 Users
Around 400,000 Italian bank accounts have been accessed in one of Europe’s largest data breaches.
> Report: North Korean Cyber Attacks Launched from Other Countries
India and China prime candidates, according to Recorded Future
> Software Libraries Account for Just 7% of App Vulns
The average application contains 26.7 custom code vulnerabilities, vs. just two CVEs in library code.
> Turkish Android App Store 100% Flush with Malware
At CepKutusu, every single app delivered malicious banking code.
> Russia Passes Bill Banning Tor, VPNs
The bill now goes to President Vladimir Putin to be signed into the law.
> British Man Confesses to Deutsche Telekom Mirai Attack
"Daniel K" faces up to a decade in jail
> CopyKittens: Report Details Possible Iranian Threat Group
Cyber espionage group uses in-house and commercial tools to target wide range of victims
> Wells Fargo Asks Judges to Force Return of Leaked Client Data
Bank’s lawyer accidentally sent data on tens of thousands of clients to opposition lawyer
> New Form of Cyber-Attack Targets Energy Sector
The approach has the potential to cause power cuts, disrupt vital facilities and even cost lives.